Advisories · Technology
Microsoft PowerShell 7.4.
Every CVE that names Microsoft PowerShell 7.4 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Microsoft PowerShell Security Feature Bypass Vulnerability
- Microsoft PowerShell 7.4
- Microsoft PowerShell 7.5
- CWE-358
- CVSS 8.8 High
Microsoft PowerShell Remote Code Execution Vulnerability
- Microsoft PowerShell 7.4
- Microsoft PowerShell 7.5
- CWE-807
- CVSS 7.8 High
Microsoft PowerShell Remote Code Execution Vulnerability
- Microsoft PowerShell 7.4
- Microsoft PowerShell 7.5
- Command injection
- CVSS 8.8 High
Microsoft PowerShell Remote Code Execution Vulnerability
- Microsoft PowerShell 7.4
- Microsoft PowerShell 7.5
- Path traversal
- CVSS 7.8 High
Microsoft PowerShell Security Feature Bypass Vulnerability
- Microsoft PowerShell 7.4
- Microsoft PowerShell 7.5
- Code injection
- CVSS 7.3 High
PowerShell Elevation of Privilege Vulnerability
- Microsoft PowerShell 7.4
- Microsoft PowerShell 7.5
- Broken access control
- CVSS 7.4 High
PowerShell Information Disclosure Vulnerability
- Microsoft PowerShell 7.4
- Microsoft PowerShell 7.5
- Server-side request forgery (SSRF)
- CVSS 7.8 High
Microsoft PowerShell Security Feature Bypass Vulnerability
- Microsoft PowerShell 7.4
- Microsoft PowerShell 7.5
- CWE-20
- CVSS 7.3 High
PowerShell Elevation of Privilege Vulnerability
- Microsoft PowerShell 7.4
- Microsoft PowerShell 7.5
- Broken access control
- CVSS 7.0 High
PowerShell Direct Elevation of Privilege Vulnerability
- Microsoft PowerShell 7.4
- Microsoft PowerShell 7.5
- CWE-923
- CVSS 7.5 High
Microsoft QUIC Denial of Service Vulnerability
- Microsoft Visual Studio 2022 version 17.9
- Microsoft Windows Server 2022
- Denial of service
- CVSS 6.5 Medium
PowerShell Information Disclosure Vulnerability
- Microsoft PowerShell 7.2
- Microsoft PowerShell 7.3
- Hard-coded credentials