High · 7.0 CVE-2025-49734 EUVD-2025-27373GHSA-q77p-wfv8-75pp

PowerShell Direct Elevation of Privilege Vulnerability

Published Sep 9, 2025 · Updated Feb 20, 2026 · Assigned by microsoft

Vendor: Microsoft Product: PowerShell 7.4 Product: PowerShell 7.5 Product: Windows 10 Version 1607 Product: Windows 10 Version 1809 Product: Windows 10 Version 21H2 Product: Windows 10 Version 22H2 Product: Windows 11 version 22H2 Product: Windows 11 version 22H3 Product: Windows 11 version 23H2 Product: Windows 11 Version 24H2 Product: Windows Server 2016 Product: Windows Server 2016 (Server Core installation) Product: Windows Server 2019 Product: Windows Server 2019 (Server Core installation) Product: Windows Server 2022 Product: Windows Server 2022, 23H2 Edition (Server Core installation) Product: Windows Server 2025 Product: Windows Server 2025 (Server Core installation) Platform: Windows

Description

Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	PowerShell 7.4	7.4.0 – < 7.4.12	7.4.12
Microsoft	PowerShell 7.5	7.5.0 – < 7.5.3	7.5.3
Microsoft	Windows 10 Version 1607	10.0.14393.0 – < 10.0.14393.8422	10.0.14393.8422
Microsoft	Windows 10 Version 1809	10.0.17763.0 – < 10.0.17763.7792	10.0.17763.7792
Microsoft	Windows 10 Version 21H2	10.0.19044.0 – < 10.0.19044.6332	10.0.19044.6332
Microsoft	Windows 10 Version 22H2	10.0.19045.0 – < 10.0.19045.6332	10.0.19045.6332
Microsoft	Windows 11 version 22H2	10.0.22621.0 – < 10.0.22621.5909	10.0.22621.5909
Microsoft	Windows 11 version 22H3	10.0.22631.0 – < 10.0.22631.5909	10.0.22631.5909
Microsoft	Windows 11 Version 23H2	10.0.22631.0 – < 10.0.22631.5909	10.0.22631.5909
Microsoft	Windows 11 Version 24H2	10.0.26100.0 – < 10.0.26100.6584	10.0.26100.6584
Microsoft	Windows Server 2016	10.0.14393.0 – < 10.0.14393.8422	10.0.14393.8422
Microsoft	Windows Server 2016 (Server Core installation)	10.0.14393.0 – < 10.0.14393.8422	10.0.14393.8422
Microsoft	Windows Server 2019	10.0.17763.0 – < 10.0.17763.7792	10.0.17763.7792
Microsoft	Windows Server 2019 (Server Core installation)	10.0.17763.0 – < 10.0.17763.7792	10.0.17763.7792
Microsoft	Windows Server 2022	10.0.20348.0 – < 10.0.20348.4171	10.0.20348.4171
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	10.0.25398.0 – < 10.0.25398.1849	10.0.25398.1849
Microsoft	Windows Server 2025	10.0.26100.0 – < 10.0.26100.6584	10.0.26100.6584
Microsoft	Windows Server 2025 (Server Core installation)	10.0.26100.0 – < 10.0.26100.6584	10.0.26100.6584

Advisories 3

WID-SEC-2025-2005 Microsoft Windows und Windows Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2025
MSRC-CVE-2025-49734 PowerShell Direct Elevation of Privilege Vulnerability Microsoft Security Response Center · Sep 11, 2025
NCSC-2025-0277 Kwetsbaarheden verholpen in Microsoft Windows NCSC-NL (Netherlands) · Sep 9, 2025

References

PowerShell Direct Elevation of Privilege Vulnerability vendor-advisory patch