# Microsoft PowerShell vulnerabilities Source: https://junglewise.ai/threats/technologies/powershell Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/powershell.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 8 vulnerabilities in Microsoft PowerShell: 2 in the last 7 days and 4 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-122985, was published on 10 November 2026. 2 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 2 - Last 30 days: 2 - Last 90 days: 4 - All time: 8 (0 critical, 0 exploited in the wild) ## About Microsoft PowerShell A cross-platform task automation solution made up of a command-line shell, a scripting language, and a configuration management framework. ## Latest Microsoft PowerShell vulnerabilities - [CVE-2026-122985: Microsoft PowerShell XXE information disclosure](https://junglewise.ai/threats/cve-2026-122985-improper-restriction-of-xml-external-entity-reference-in) (medium, CVSS 6.1, published 10 Nov 2026) - [CVE-2026-121675: Microsoft PowerShell XML external entity information disclosure](https://junglewise.ai/threats/cve-2026-121675-improper-restriction-of-xml-external-entity-reference-in) (medium, CVSS 6.1, published 10 Nov 2026) - [CVE-2026-96303: Microsoft PowerShell security check bypass](https://junglewise.ai/threats/cve-2026-96303-improperly-implemented-security-check-for-standard-in-microsoft) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-96251: Microsoft PowerShell code execution via untrusted security decision](https://junglewise.ai/threats/cve-2026-96251-reliance-on-untrusted-inputs-in-a-security-decision-in-microsoft) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-50523: Microsoft PowerShell command injection](https://junglewise.ai/threats/cve-2026-50523-microsoft-powershell-command-injection) (high, CVSS 7.8, published 14 Aug 2026) - [CVE-2026-40400: Microsoft Windows PowerShell relative path traversal remote code execution](https://junglewise.ai/threats/cve-2026-40400-microsoft-windows-powershell-relative-path-traversal-remote-code) (high, CVSS 8, published 14 Jul 2026) - [CVE-2026-26143: Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.](https://junglewise.ai/threats/cve-2026-26143-improper-input-validation-in-microsoft-powershell-allows-an) (high, CVSS 7.8, published 14 Apr 2026) - [CVE-2022-24512: Microsoft .NET stack buffer overflow in Double Parse routine](https://junglewise.ai/threats/cve-2022-24512-microsoft-net-stack-buffer-overflow-in-double-parse-routine) (medium, CVSS 6.3, published 18 Oct 2022) ## Most severe Microsoft PowerShell vulnerabilities - [CVE-2026-96251: Microsoft PowerShell code execution via untrusted security decision](https://junglewise.ai/threats/cve-2026-96251-reliance-on-untrusted-inputs-in-a-security-decision-in-microsoft) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-40400: Microsoft Windows PowerShell relative path traversal remote code execution](https://junglewise.ai/threats/cve-2026-40400-microsoft-windows-powershell-relative-path-traversal-remote-code) (high, CVSS 8, published 14 Jul 2026) - [CVE-2026-26143: Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.](https://junglewise.ai/threats/cve-2026-26143-improper-input-validation-in-microsoft-powershell-allows-an) (high, CVSS 7.8, published 14 Apr 2026) - [CVE-2026-50523: Microsoft PowerShell command injection](https://junglewise.ai/threats/cve-2026-50523-microsoft-powershell-command-injection) (high, CVSS 7.8, published 14 Aug 2026) - [CVE-2026-96303: Microsoft PowerShell security check bypass](https://junglewise.ai/threats/cve-2026-96303-improperly-implemented-security-check-for-standard-in-microsoft) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2022-24512: Microsoft .NET stack buffer overflow in Double Parse routine](https://junglewise.ai/threats/cve-2022-24512-microsoft-net-stack-buffer-overflow-in-double-parse-routine) (medium, CVSS 6.3, published 18 Oct 2022) - [CVE-2026-122985: Microsoft PowerShell XXE information disclosure](https://junglewise.ai/threats/cve-2026-122985-improper-restriction-of-xml-external-entity-reference-in) (medium, CVSS 6.1, published 10 Nov 2026) - [CVE-2026-121675: Microsoft PowerShell XML external entity information disclosure](https://junglewise.ai/threats/cve-2026-121675-improper-restriction-of-xml-external-entity-reference-in) (medium, CVSS 6.1, published 10 Nov 2026) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 2 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 2 | 0 | 0 | ## Other Microsoft technologies - [Microsoft Windows](https://junglewise.ai/threats/technologies/windows): 2,362 vulnerabilities - [Microsoft Windows 10](https://junglewise.ai/threats/technologies/windows-10): 589 vulnerabilities - [Microsoft Windows 11 24h2](https://junglewise.ai/threats/technologies/windows-11-24h2): 565 vulnerabilities - [Microsoft Windows 11 25h2](https://junglewise.ai/threats/technologies/windows-11-25h2): 534 vulnerabilities - [Microsoft Windows Server 2025](https://junglewise.ai/threats/technologies/windows-server-2025): 534 vulnerabilities - [Microsoft Windows Server 2022](https://junglewise.ai/threats/technologies/windows-server-2022): 528 vulnerabilities - [Microsoft Windows Server 2019](https://junglewise.ai/threats/technologies/windows-server-2019): 521 vulnerabilities - [Microsoft Windows Server 2012](https://junglewise.ai/threats/technologies/windows-server-2012): 517 vulnerabilities - [Microsoft Windows 11](https://junglewise.ai/threats/technologies/windows-11): 494 vulnerabilities - [Microsoft Windows Server 2016](https://junglewise.ai/threats/technologies/windows-server-2016): 476 vulnerabilities - [Microsoft Windows 10 1809](https://junglewise.ai/threats/technologies/windows-10-1809): 380 vulnerabilities - [Microsoft Windows 10 21h2](https://junglewise.ai/threats/technologies/windows-10-21h2): 373 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Microsoft PowerShell vulnerabilities", https://junglewise.ai/threats/technologies/powershell, 13 November 2026.