CVE-2026-83578
9.8 CRITICALPublished 2026-10-13 · Updated 2026-10-16
AI risk analysis
- Summary
- Windows PowerShell contains an integer underflow vulnerability that allows remote attackers to execute arbitrary code when processing certain input values. This critical flaw can be exploited over the network without authentication, making it particularly dangerous for systems with PowerShell exposed to untrusted networks.
- Exploitability
- Exploitation is likely straightforward for remote attackers with minimal preconditions, requiring only network access to a system running PowerShell with vulnerable components.
- Blast radius
- The vulnerability could affect numerous Windows systems across enterprise environments since PowerShell is widely used for automation and management tasks, potentially allowing attackers to gain full system compromise.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Apply the latest Windows updates that include the PowerShell fix for CVE-2026-83578, specifically targeting the integer underflow in PowerShell's handling of numeric values.
rcepowershellremote
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-122, CWE-190, CWE-191
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-85817
- HIGHCVE-2026-102856
- HIGHCVE-2026-70257
- HIGHCVE-2026-83725
- HIGHCVE-2026-88145
- HIGHCVE-2026-88186
- HIGHCVE-2026-97004
- HIGHCVE-2026-97739
Related by shared AI tags and CWE weakness class. Browse the full archive.