EUVD-2026-22402CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
AnalysisAI
Microsoft PowerShell privilege escalation affecting Windows 10/11 and Server 2016-2025 allows authenticated local attackers with low privileges to gain SYSTEM-level access through improper input validation (CWE-20). The vulnerability has a CVSS score of 7.8 with low attack complexity and requires no user interaction, enabling straightforward exploitation by any standard user account. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: inventory all Windows 10, 11, and Server 2016-2025 systems in your environment and identify those with standard user accounts. Within 7 days: deploy Microsoft's released patches to all affected systems using your standard patch management process, prioritizing servers and privileged workstations. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today