Windows PowerShell vulnerabilities

PowerShell in Windows has a vulnerability allowing remote code execution when PSObject wraps a CIM Instance. This affects multiple versions of Windows, including Windows Server 2008 and Windows 10.

Integer underflow vulnerability in Windows PowerShell allows an unauthorized attacker to execute code over a network.

Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.

Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.

A protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.

An integer overflow or wraparound vulnerability exists in Windows PowerShell. An authorized attacker can exploit this flaw to execute code locally.

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.

Relative path traversal vulnerability in Windows PowerShell allows an authorized attacker to execute code remotely.

Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.