Microsoft PowerShell Improper Access Control Vulnerability Allowing Privilege Escalation

A vulnerability in Microsoft PowerShell has been identified, allowing an authorized attacker to elevate privileges locally. This issue arises from improper access control, enabling attackers to gain elevated rights and potentially execute actions with higher privileges than intended.

Impact

Exploitation of this vulnerability could allow an authenticated attacker to gain elevated privileges, enabling them to create, modify, or delete files with the rights of the 'NT AUTHORITY\SYSTEM' account.

Remediation

Users can download the security update for PowerShell 7.5 or 7.4 through the Microsoft Update Catalog. For Windows Server 2012 R2, 2012, 2008 R2, 2016, 2022, and various Windows 10 and 11 versions, security updates are also available via the Microsoft Update Catalog.