Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could create, modify, or delete files in the security context of the "NT AUTHORITY\SYSTEM" account.
According to the CVSS metric, user interaction is required (UI:R) and privileges required is Low (PR:L). What does that mean for this vulnerability?
An authenticated attacker could place a malicious file in a specified custom module path and then wait for a user to run a privileged .NET application that starts a PowerShell session under NT AUTHORITY\SYSTEM privileges
Security updates
10.0.17763.7919 — https://support.microsoft.com/help/5066586
10.0.20348.4294 — https://support.microsoft.com/help/5066782
10.0.19044.6456 — https://support.microsoft.com/help/5066791
10.0.22621.6060 — https://support.microsoft.com/help/5066793
10.0.26100.6899 — https://support.microsoft.com/help/5066835
10.0.25398.1913 — https://support.microsoft.com/help/5066780
10.0.10240.21161 — https://support.microsoft.com/help/5066837
10.0.14393.8519 — https://support.microsoft.com/help/5066836
6.0.6003.23571 — https://support.microsoft.com/help/5066874
6.0.6003.23571 — https://support.microsoft.com/help/5066877
6.1.7601.27974 — https://support.microsoft.com/help/5066872
6.1.7601.27974 — https://support.microsoft.com/help/5066876
6.2.9200.25722 — https://support.microsoft.com/help/5066875
6.3.9600.22824 — https://support.microsoft.com/help/5066873
7.4.13 — https://github.com/PowerShell/Announcements/issues/81
Vulnerabilities 1
-
High 7.3
PowerShell Elevation of Privilege Vulnerability
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
Revision history
-
#2
In the Security Updates table, updated Download and Article links for PowerShell 7.4 and PowerShell 7.5. See [https://github.com/PowerShell/Announcements/issues/81](https://github.com/PowerShell/Announcements/issues/81) for more information.
-
#1
Information published.
References
-
CVE-2025-25004 PowerShell Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25004
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss