Description
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | PowerShell 7.4 | 7.4.0 – < 7.4.21 | 7.4.21 |
| Microsoft | PowerShell 7.5 | 7.5.0 – < 7.5.12 | 7.5.12 |
| Microsoft | PowerShell 7.6 | 7.6.0 – < 7.6.8 | 7.6.8 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | powershell | 7.6.9-r0 | — |
Advisories 2
- MSRC-CVE-2026-96251 Microsoft PowerShell Remote Code Execution Vulnerability Microsoft Security Response Center · Nov 10, 2026
- WID-SEC-2026-3893 Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 4, 2026
References
- Microsoft PowerShell Remote Code Execution Vulnerability vendor-advisory patch