Microsoft PowerShell Core
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-1167 | 6.1 ; 6.2 | A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC e | MEDIUM 4.1 | 1.1 % | ||
| CVE-2019-0657 | | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio | MEDIUM 5.9 | 4.5 % | ||
| CVE-2019-0632 | 6.1 ; 6.2 | A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Featur | HIGH 7.8 | 1.3 % | ||
| CVE-2019-0631 | 6.1 ; 6.2 | A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Featur | HIGH 7.8 | 1.3 % | ||
| CVE-2019-0627 | 6.1 ; 6.2 | A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Featur | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8415 | | A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vu | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8256 | | A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Co | HIGH 8.8 | 23 % | ||
| CVE-2018-8292 | 6.0 | An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NE | HIGH 7.5 | 15 % |