CVE-2026-59119
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
A vulnerability in Microsoft PowerShell is due to incorrect default permissions, allowing an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit incorrect permissions to gain elevated privileges, potentially leading to full system compromise.
Recommendation
Install the latest security updates for PowerShell. Review and correct default permissions on PowerShell files and directories.
Other vulnerabilities in Microsoft PowerShell
See all- CVE-2026-96251High
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
- CVE-2026-50523High
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
- CVE-2026-70338High
Improper control of generation of code (code injection) in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
Original NVD description (English source)
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS