Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.
Metrics
Affected Vendors & Products
References
History
Mon, 15 Sep 2025 10:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Microsoft
Microsoft powershell Microsoft windows Microsoft windows 10 Microsoft windows 11 Microsoft windows Server Microsoft windows Server 2016 |
|
Vendors & Products |
Microsoft
Microsoft powershell Microsoft windows Microsoft windows 10 Microsoft windows 11 Microsoft windows Server Microsoft windows Server 2016 |
Wed, 10 Sep 2025 18:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Tue, 09 Sep 2025 17:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally. | |
Title | PowerShell Direct Elevation of Privilege Vulnerability | |
Weaknesses | CWE-923 | |
References |
| |
Metrics |
cvssV3_1
|

Status: PUBLISHED
Assigner: microsoft
Published: 2025-09-09T17:00:41.874Z
Updated: 2025-09-12T00:48:34.006Z
Reserved: 2025-06-09T21:23:11.524Z
Link: CVE-2025-49734

Updated: 2025-09-10T17:26:48.922Z

Status : Awaiting Analysis
Published: 2025-09-09T17:15:48.057
Modified: 2025-09-11T17:14:36.413
Link: CVE-2025-49734

No data.