Microsoft PowerShell 7.5

Name: Microsoft PowerShell 7.5
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical11high4medium0low

updated 2026-10-27

vulnerabilities (53)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-55315US	—	66.5% (99th)	Exploit	no fix	2025-10-14	≤ vers:unknown/*
CVE-2024-43498US	—	3.59% (89th)	—	7.5.0	2024-11-12	7.5.0 → 7.5.0
CVE-2024-43485US	—	3.08% (88th)	—	7.5.0	2024-10-08	7.5.0 → 7.5.0
CVE-2026-26130US	—	2.99% (87th)	—	no fix	2026-03-10	≤ vers:unknown/*
CVE-2024-43499US	—	2.60% (85th)	—	7.5.0	2024-11-12	7.5.0 → 7.5.0
CVE-2026-32178US	—	2.28% (83rd)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-33116US	—	2.14% (82nd)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-26127US	—	2.13% (82nd)	—	no fix	2026-03-10	≤ vers:unknown/*
CVE-2026-32203US	—	1.90% (80th)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-26171US	—	1.75% (78th)	—	7.5.6	2026-04-14	4 versions
CVE-2025-21171US	—	1.72% (77th)	—	7.5.0	2025-01-14	7.5.0 → 7.5.0
CVE-2026-23666US	—	1.33% (71st)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-62901US	—	1.23% (69th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2025-30399US	—	1.07% (65th)	—	7.5.2	2025-06-13	7.5.0 → 7.5.2
CVE-2026-70337US	—	0.94% (61st)	—	7.5.10.0	2026-08-11	4 versions
CVE-2026-47285US	—	0.92% (60th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-58612US	high7.5	0.87% (59th)	—	7.5.10.0	2026-08-11	4 versions
CVE-2026-62902US	—	0.87% (59th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-40400US	—	0.87% (59th)	—	7.5.11	2026-07-14	2 versions
CVE-2026-69320US	—	0.86% (58th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-70336US	high8.8	0.82% (57th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-62872US	—OT elevated	0.78% (56th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-59113US	—OT elevated	0.76% (55th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-62900US	—	0.75% (55th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-62899US	—	0.75% (55th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-23653US	medium6.5	0.74% (54th)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2025-55248US	medium5.7	0.72% (54th)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2026-96251US	high8.8	0.69% (53rd)	—	7.5.12	2026-10-13	2 versions
CVE-2026-96303US	medium6.5	0.69% (53rd)	—	7.5.12	2026-10-13	2 versions
CVE-2026-65675US	medium6.5OT elevated	0.64% (50th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2025-55247US	high7.3	0.61% (49th)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2026-32226US	—	0.54% (45th)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-69306US	—	0.54% (45th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-26143US	—	0.54% (45th)	—	7.5.5	2026-04-14	4 versions
CVE-2025-25004US	high7.3	0.48% (41st)	—	7.5.4	2025-10-14	4 versions
CVE-2026-62886US	—	0.47% (40th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-62871US	—	0.47% (40th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-58641US	—	0.47% (40th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-54981US	—	0.47% (40th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-70335US	—	0.46% (40th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65810US	high7.8	0.40% (34th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2025-54132US	high7.5	0.38% (32nd)	—	no fix	2025-08-01	≤ vers:unknown/*
CVE-2026-59119US	—OT elevated	0.38% (32nd)	—	7.5.10.0	2026-08-11	4 versions
CVE-2026-26131US	—OT elevated	0.37% (31st)	—	no fix	2026-03-10	≤ vers:unknown/*
CVE-2026-62897US	—	0.37% (31st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2025-55240US	—	0.37% (30th)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2026-70354US	high7.8	0.36% (30th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-70338US	high7.8	0.36% (29th)	—	7.5.10.0	2026-08-11	4 versions
CVE-2025-49734US	—	0.33% (26th)	—	7.5.3	2025-09-09	3 versions
CVE-2026-69278US	high7.8OT elevated	0.32% (25th)	—	no fix	2026-08-11	≤ vers:unknown/*

showing 50 of 53

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow3 CVEs
CWE-190Integer Overflow or Wraparound3 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-23Relative Path Traversal3 CVEs
CWE-284Improper Access Control3 CVEs
CWE-693Protection Mechanism Failure3 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
CWE-787Out-of-bounds Write3 CVEs

sources (3)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)43 CVEs
EUEU Vulnerability Database (ENISA)14 CVEs
USMicrosoft MSRC (CSAF)12 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan