CVE-2026-59119

Summary

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

Affected Software

VendorProductVersion RangeStatus
MicrosoftPowerShell 7.47.4.0 < 7.4.19.0affected
MicrosoftPowerShell 7.57.5.0 < 7.5.10.0affected
MicrosoftPowerShell 7.67.6.0 < 7.6.5affected

Weaknesses

  • CWE-276: CWE-276: Incorrect Default Permissions

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References