CVE-2025-25004

CWE-284 — Improper Access Control4 documents4 sources
Severity
7.3HIGH
EPSS
0.0%
top 86.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
39
Microsoft Powershell 7.4Microsoft Powershell 7.5Microsoft Windows 10 Version 1507+36 more
Timeline
PublishedOct 14

Description

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 1.3 | Impact: 5.9

Affected Packages38 packages

▶NVDmicrosoft/powershell7.4 — 7.4.13+1
▶CVEListV5microsoft/powershell_7.47.4.0 — 7.4.13
▶CVEListV5microsoft/powershell_7.57.5.0 — 7.5.4
▶NVDmicrosoft/windows< 10.0.17763.7919+4
▶NVDmicrosoft/windows_10_1507< 10.0.10240.21161

🔴Vulnerability Details

2
GHSA
GHSA-pcw6-863g-fcmj: Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally↗2025-10-14
▶
CVEList
PowerShell Elevation of Privilege Vulnerability↗2025-10-14
▶

📋Vendor Advisories

1
Microsoft
PowerShell Elevation of Privilege Vulnerability↗2025-10-14
▶
CVE-2025-25004 (HIGH CVSS 7.3) | Improper access control in Microsof | cvebase.io