CVE-2026-50523
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
Risk Assessment
An authorized attacker could execute arbitrary code in the user context, potentially leading to privilege escalation or system integrity compromise.
Recommendation
Apply available security updates from Microsoft and restrict PowerShell user privileges.
Other vulnerabilities in Microsoft PowerShell
See all- CVE-2026-96251High
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
- CVE-2026-70338High
Improper control of generation of code (code injection) in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
- CVE-2026-59119High
A vulnerability in Microsoft PowerShell is due to incorrect default permissions, allowing an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS