CyberICT

CVE-2026-70052

Microsoft · Published October 13, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

Microsoft PowerShell Remote Code Execution Vulnerability. Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.

Affected Products

  • Windows 11 Version 26H2 for ARM64-based Systems
  • Windows 11 Version 26H2 for x64-based Systems
  • Windows Server 2022
  • Windows Server 2022 (Server Core installation)

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C