Description
Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | PowerShell 7.4 | 7.4.0 – < 7.4.21 | 7.4.21 |
| Microsoft | PowerShell 7.5 | 7.5.0 – < 7.5.12 | 7.5.12 |
| Microsoft | PowerShell 7.6 | 7.6.0 – < 7.6.8 | 7.6.8 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | powershell | 7.6.9-r0 | — |
Advisories 2
- WID-SEC-2026-3893 Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 4, 2026
- MSRC-CVE-2026-96303 Microsoft PowerShell Security Feature Bypass Vulnerability Microsoft Security Response Center · Oct 22, 2026
References
- Microsoft PowerShell Security Feature Bypass Vulnerability vendor-advisory patch