← Back to search

CVE-2026-70185

8.8 HIGH

Published 2026-10-13 · Updated 2026-10-16

AI risk analysis

Summary
Windows PowerShell's protection mechanism fails locally, allowing authorized users to bypass security features they shouldn't be able to access. This creates a privilege escalation path where attackers can circumvent controls that should restrict their access.
Exploitability
Exploitation requires local access and authentication as an authorized user, making it moderately difficult but not highly complex to achieve.
Blast radius
If exploited, this flaw could allow attackers to bypass security controls across multiple PowerShell sessions and potentially escalate privileges within the Windows environment.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Apply the latest Windows updates that include the patched PowerShell security mechanisms, specifically targeting the Windows 10 22H2 and Windows 11 22H2 releases which contain the fix for this vulnerability.
privilege-escalationpowershelllocal-attack

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-639

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.