CVE-2026-70185
8.8 HIGHPublished 2026-10-13 · Updated 2026-10-16
AI risk analysis
- Summary
- Windows PowerShell's protection mechanism fails locally, allowing authorized users to bypass security features they shouldn't be able to access. This creates a privilege escalation path where attackers can circumvent controls that should restrict their access.
- Exploitability
- Exploitation requires local access and authentication as an authorized user, making it moderately difficult but not highly complex to achieve.
- Blast radius
- If exploited, this flaw could allow attackers to bypass security controls across multiple PowerShell sessions and potentially escalate privileges within the Windows environment.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Apply the latest Windows updates that include the patched PowerShell security mechanisms, specifically targeting the Windows 10 22H2 and Windows 11 22H2 releases which contain the fix for this vulnerability.
privilege-escalationpowershelllocal-attack
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-639
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-102118PoC
- HIGHCVE-2026-105464
- HIGHCVE-2026-11318PoC
- HIGHCVE-2026-12410
- HIGHCVE-2026-19743
- HIGHCVE-2026-20521
- HIGHCVE-2026-28625
- HIGHCVE-2026-28648
Related by shared AI tags and CWE weakness class. Browse the full archive.