Read the docs
Microsoft update

KB5074204

Security Update

View on Microsoft →

Fixed in

Fixes 1 record

Priority MEDIUM 40

Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02234 Published 2025-12-09 Fixed in 10.0.14393.8688, 10.0.17763.8146 +11 CWE-77