Improper Access Control in Microsoft PowerShell Allows Local Privilege Escalation
CVE-2025-25004
7.3HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 14 October 2025
What is CVE-2025-25004?
A security vulnerability in Microsoft PowerShell allows an authorized user to perform actions that could lead to local privilege escalation. Due to improper access controls, attackers with limited privileges can exploit this flaw to gain elevated rights on the system, potentially compromising sensitive data and system integrity. It is essential for users and administrators to apply the necessary patches and updates to mitigate the risks associated with this vulnerability.
Affected Version(s)
PowerShell 7.4 Unknown 7.4.0 < 7.4.13
PowerShell 7.5 Unknown 7.5.0 < 7.5.4
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21161