CVE-2026-50523

43th percentile - higher than 43% of all known CVEs

Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.

An authorized attacker could execute arbitrary code in the user context, potentially leading to privilege escalation or system integrity compromise.

Apply available security updates from Microsoft and restrict PowerShell user privileges.