CVE-2017-8565
HighSummary
PowerShell in Windows has a vulnerability allowing remote code execution when PSObject wraps a CIM Instance. This affects multiple versions of Windows, including Windows Server 2008 and Windows 10.
Risk Assessment
An attacker could exploit this vulnerability to execute remote code on vulnerable systems, potentially leading to system takeover.
Recommendation
It is recommended to update systems to the latest versions that include security patches addressing this vulnerability.
Other vulnerabilities in Windows PowerShell
See all- CVE-2026-83578Critical
Integer underflow vulnerability in Windows PowerShell allows an unauthorized attacker to execute code over a network.
- CVE-2026-85817High
Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.
- CVE-2026-85805Medium
Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-70185High
A protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
- CVE-2026-70052High
An integer overflow or wraparound vulnerability exists in Windows PowerShell. An authorized attacker can exploit this flaw to execute code locally.
- CVE-2026-69807High
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.
- CVE-2026-62801Medium
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-40400High
Relative path traversal vulnerability in Windows PowerShell allows an authorized attacker to execute code remotely.
- CVE-2025-54100High
Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.
Original NVD description (English source)
Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when PSObject wraps a CIM Instance, aka "Windows PowerShell Remote Code Execution Vulnerability".
Vulnerability data from NVD (NIST) · CISA KEV · EPSS