Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.
History

Mon, 15 Sep 2025 10:45:00 +0000

Type Values Removed Values Added
First Time appeared Microsoft
Microsoft powershell
Microsoft windows
Microsoft windows 10
Microsoft windows 11
Microsoft windows Server
Microsoft windows Server 2016
Vendors & Products Microsoft
Microsoft powershell
Microsoft windows
Microsoft windows 10
Microsoft windows 11
Microsoft windows Server
Microsoft windows Server 2016

Wed, 10 Sep 2025 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 09 Sep 2025 17:15:00 +0000

Type Values Removed Values Added
Description Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.
Title PowerShell Direct Elevation of Privilege Vulnerability
Weaknesses CWE-923
References
Metrics cvssV3_1

{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}


cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2025-09-09T17:00:41.874Z

Updated: 2025-09-12T00:48:34.006Z

Reserved: 2025-06-09T21:23:11.524Z

Link: CVE-2025-49734

cve-icon Vulnrichment

Updated: 2025-09-10T17:26:48.922Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-09T17:15:48.057

Modified: 2025-09-11T17:14:36.413

Link: CVE-2025-49734

cve-icon Redhat

No data.