Priority LOW 30
Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00691 · Published 2026-10-13 · Fixed in 7.4.21, 7.5.12 +1 CWE-358
Priority MEDIUM 41
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00691 · Published 2026-10-13 · Fixed in 7.4.21, 7.5.12 +1 CWE-807
Priority LOW 36
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00322 · Published 2026-08-14 · Fixed in 7.4.19.0, 7.5.10.0 +1 CWE-77
Priority MEDIUM 42
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00939 · Published 2026-08-11 · Fixed in 7.4.19.0, 7.5.10.0 +1 CWE-23
Priority LOW 36
Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00359 · Published 2026-08-11 · Fixed in 7.4.19.0, 7.5.10.0 +1 CWE-94
Priority LOW 34
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00382 · Published 2026-08-11 · Fixed in 7.4.19.0, 7.5.10.0 +1 CWE-276
Priority LOW 34
Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00874 · Published 2026-08-11 · Fixed in 7.4.19.0, 7.5.10.0 +1 CWE-918
Priority MEDIUM 42
Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01753 · Published 2026-04-14 · Fixed in 10.0.6, 8.0.26 +4 CWE-400
Priority LOW 37
Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00536 · Published 2026-04-14 · Fixed in 7.4.14, 7.5.5 CWE-20
Priority LOW 35
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00487 · Published 2025-10-14 · Fixed in 7.4.13, 7.5.4 +15 CWE-284
Priority LOW 33
Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00329 · Published 2025-09-09 · Fixed in 7.4.12, 7.5.3 +9 CWE-923
Priority LOW 37
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.01072 · Published 2025-06-13 · Partial fix · 8.0.17, 9.0.6 +6 CWE-426
Priority LOW 38
.NET Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.01722 · Published 2025-01-14 · Partial fix · 9.0.1, 17.10.10 +4 CWE-122
Priority LOW 31
.NET and Visual Studio Remote Code Execution Vulnerability
CVSS 3.1MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.01248 · Published 2024-05-14 · Fixed in 8.0.5, 7.0.19 +5 CWE-122
Priority LOW 39
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.02513 · Published 2024-04-09 · Fixed in 17.9.6, 17.4.18 +11 CWE-416
Priority MEDIUM 44
Microsoft QUIC Denial of Service Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0299 · Published 2024-03-12 · Fixed in 17.9.3, 10.0.20348.2340 +11 CWE-400
Priority HIGH 72
.NET and Visual Studio Denial of Service Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0309 · Published 2024-03-12 · Fixed in 17.9.3, 7.3.12 +6 CWE-400
Priority MEDIUM 54
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02778 · Published 2024-01-09 · Fixed in 8.0.1, 7.0.15 +25 CWE-20
Priority LOW 32
PowerShell Information Disclosure Vulnerability
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01436 · Published 2023-11-20 · Fixed in 7.2.17, 7.3.10 +1 CWE-798
Priority MEDIUM 44
.NET Denial of Service Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02838 · Published 2023-01-10 · Fixed in 6.0.13, 7.2.9 CWE-502
Priority LOW 36
Windows Graphics Component Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01119 · Published 2022-12-13 · Fixed in 10.0.17763.3770, 10.0.19043.2364 +12
Priority HIGH 71
PowerShell Remote Code Execution Vulnerability
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.60779 · Published 2022-12-13 · Fixed in 7.2.8, 7.3.1 +14
Priority LOW 31
.NET Spoofing Vulnerability
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02498 · Published 2022-08-09 · Fixed in 15.9.50, 17.2.7 +9 CWE-290
Priority MEDIUM 47
.NET and Visual Studio Denial of Service Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05703 · Published 2022-05-10 · Fixed in 3.1.25, 5.0.17 +9 CWE-400
Priority LOW 35
PowerShell Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0065 · Published 2022-04-15 · Fixed in 10.0.17763.2803, 10.0.18363.2212 +13
Load more
THREATIST.IORead the docs