PowerShell Elevation of Privilege Vulnerability

ALTO 7.8CVE-2022-26788 · BIT-powershell-2022-26788 · GHSA-q7x5-x7rr-2859 · Published 15/04/2022 · updated 17/06/2026

En resumen

CVE-2022-26788 es una vulnerabilidad ALTO (CVSS 7.8) que afecta a Microsoft.PowerShell.SDK, powershell (microsoft).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.65%, mayor que el 51.2% de las vulnerabilidades.
Solución: actualizar a 7.0.10, 7.1.7, 7.2.3 o posterior.

Package	Affected versions	Patched versions
Microsoft.PowerShell.SDK NuGet	`≥ 7.0.0-preview.1, < 7.0.10≥ 7.1.0-preview.1, < 7.1.7≥ 7.2.0-preview.1, < 7.2.3`	`7.0.107.1.77.2.3`
powershell microsoft	`≥ 7.0, < 7.0.10≥ 7.1, < 7.1.7≥ 7.2, < 7.2.3`	`7.0.107.1.77.2.3`

PowerShell Elevation of Privilege Vulnerability.

NVD description

PowerShell Elevation of Privilege Vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.