CVE-2026-70052: Windows PowerShell integer overflow in local execution

CVE-2026-70052 · Severity: high · CVSS 7.8 · Published 2026-10-13

An integer overflow vulnerability in Windows PowerShell allows an authorized local user to execute arbitrary code with elevated privileges. An attacker with legitimate access to a Windows system could exploit this flaw to run malicious commands and compromise system security or steal sensitive data.

Technologies: Microsoft Windows PowerShell, Microsoft Windows 11 23h2, Microsoft Windows 11 24h2, Microsoft Windows 11 25h2, Microsoft Windows 11 26h1, Microsoft Windows 11 26h2, Microsoft Windows Server 2022, Microsoft Windows Server 2025. Vendors: Microsoft.

Quick answers

Is CVE-2026-70052 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-70052 being exploited in the wild.
How severe is CVE-2026-70052?
High severity, with a CVSS score of 7.8, published 13 October 2026.
Which products and versions are affected?
Microsoft Windows PowerShell.
Is there a fix for CVE-2026-70052?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-70052 attacked?
It is attacked with local access.
Am I affected by CVE-2026-70052?
Check whether you run Microsoft Windows PowerShell, Microsoft Windows 11 23h2, Microsoft Windows 11 24h2 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An integer overflow or wraparound condition in Windows PowerShell permits local code execution when triggered by an authenticated user. The vulnerability requires prior local access to the system; exploitation results in arbitrary code execution at the privilege level of the PowerShell process.

Affected products

  • Microsoft Windows PowerShell

Timeline

  • 2026-10-13: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.