Microsoft Powershell 7.4 vulnerabilities

14 known vulnerabilities affecting microsoft/powershell_7.4.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL1HIGH11MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2025-25004HIGHCVSS 7.3≥ 7.4.0, < 7.4.132025-10-14

CVE-2025-25004 [HIGH] CWE-284 CVE-2025-25004: Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

cvelistv5nvd

CVE-2025-49734HIGHCVSS 7.0≥ 7.4.0, < 7.4.122025-09-09

CVE-2025-49734 [HIGH] CWE-923 CVE-2025-49734: Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.

cvelistv5nvd

CVE-2025-30399HIGHCVSS 7.5≥ 7.4.0, < 7.4.112025-06-13

CVE-2025-30399 [HIGH] CWE-426 CVE-2025-30399: Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.

cvelistv5nvd

CVE-2024-43484HIGHCVSS 7.5≥ 7.4.0, < 7.4.62024-10-08

CVE-2024-43484 [HIGH] CWE-407 CVE-2024-43484: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

cvelistv5nvd

CVE-2024-43485HIGHCVSS 7.5≥ 7.4.0, < 7.4.62024-10-08

CVE-2024-43485 [HIGH] CWE-407 CVE-2024-43485: .NET and Visual Studio Denial of Service Vulnerability .NET and Visual Studio Denial of Service Vulnerability

cvelistv5nvd

CVE-2024-43483HIGHCVSS 7.5≥ 7.4.0, < 7.4.62024-10-08

CVE-2024-43483 [HIGH] CWE-407 CVE-2024-43483: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

cvelistv5nvd

CVE-2024-30105HIGHCVSS 7.5≥ 7.4.0, < 7.4.42024-07-09

CVE-2024-30105 [HIGH] CWE-400 CVE-2024-30105: .NET and Visual Studio Denial of Service Vulnerability .NET and Visual Studio Denial of Service Vulnerability

cvelistv5nvd

CVE-2024-38095HIGHCVSS 7.5≥ 7.4.0, < 7.4.42024-07-09

CVE-2024-38095 [HIGH] CWE-20 CVE-2024-38095: .NET and Visual Studio Denial of Service Vulnerability .NET and Visual Studio Denial of Service Vulnerability

cvelistv5nvd

CVE-2024-30045MEDIUMCVSS 6.3≥ 7.4.0, < 7.4.32024-05-14

CVE-2024-30045 [MEDIUM] CWE-122 CVE-2024-30045: .NET and Visual Studio Remote Code Execution Vulnerability .NET and Visual Studio Remote Code Execution Vulnerability

cvelistv5nvd

CVE-2024-21409HIGHCVSS 7.3≥ 7.4.0, < 7.4.22024-04-09

CVE-2024-21409 [HIGH] CWE-416 CVE-2024-21409: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

cvelistv5nvd

CVE-2024-21392HIGHCVSS 7.5≥ 7.4.0, < 7.4.12024-03-12

CVE-2024-21392 [HIGH] CWE-400 CVE-2024-21392: .NET and Visual Studio Denial of Service Vulnerability .NET and Visual Studio Denial of Service Vulnerability

cvelistv5nvd

CVE-2024-26190HIGHCVSS 7.5≥ 7.4.0, < 7.4.22024-03-12

CVE-2024-26190 [HIGH] CWE-400 Microsoft QUIC Denial of Service Vulnerability Microsoft QUIC Denial of Service Vulnerability Microsoft QUIC Denial of Service Vulnerability

cvelistv5

CVE-2024-0057CRITICALCVSS 9.1≥ 7.4.0, < 7.4.22024-01-09

CVE-2024-0057 [CRITICAL] CWE-20 CVE-2024-0057: NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

cvelistv5nvd

CVE-2023-36013MEDIUMCVSS 6.5≥ 7.4.0, < 7.4.02023-11-20

CVE-2023-36013 [MEDIUM] CWE-798 PowerShell Information Disclosure Vulnerability PowerShell Information Disclosure Vulnerability PowerShell Information Disclosure Vulnerability

cvelistv5