← Back to search

CVE-2026-83578

9.8 CRITICAL

Published 2026-10-13 · Updated 2026-10-16

AI risk analysis

Summary
Windows PowerShell contains an integer underflow vulnerability that allows remote attackers to execute arbitrary code when processing certain input values. This critical flaw can be exploited over the network without authentication, making it particularly dangerous for systems with PowerShell exposed to untrusted networks.
Exploitability
Exploitation is likely straightforward for remote attackers with minimal preconditions, requiring only network access to a system running PowerShell with vulnerable components.
Blast radius
The vulnerability could affect numerous Windows systems across enterprise environments since PowerShell is widely used for automation and management tasks, potentially allowing attackers to gain full system compromise.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Apply the latest Windows updates that include the PowerShell fix for CVE-2026-83578, specifically targeting the integer underflow in PowerShell's handling of numeric values.
rcepowershellremote

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-122, CWE-190, CWE-191

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.