Product:
Windows PowerShell
Summary
Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally. This vulnerability can lead to significant security risks if exploited. Attackers with local access can gain elevated privileges, potentially compromising the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7 | CVE-2025-49734 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system and be able to execute commands in Windows PowerShell. By manipulating the communication channels, the attacker can elevate their privileges, allowing them to perform unauthorized actions on the system.
Affected Products
- Windows PowerShell: A task automation and configuration management framework from Microsoft, consisting of a command-line shell and associated scripting language.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, restricting local access to systems and monitoring PowerShell usage can help reduce the risk of exploitation.