{"id":"CVE-2025-25004","details":"Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.","aliases":["BIT-powershell-2025-25004"],"modified":"2026-07-08T06:56:21.005567528Z","published":"2025-10-14T17:15:39.380Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*"],"extracted_events":[{"fixed":"10.0.10240.21161"},{"fixed":"10.0.10240.21161"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_10_1507"},{"source":"CPE_RANGE","vendor_product":"microsoft:windows_10_1607","cpes":["cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*"],"extracted_events":[{"fixed":"10.0.14393.8519"},{"fixed":"10.0.14393.8519"}]},{"cpes":["cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*"],"extracted_events":[{"fixed":"10.0.17763.7919"},{"fixed":"10.0.17763.7919"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_10_1809"},{"vendor_product":"microsoft:windows_10_21h2","cpes":["cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.19044.6456"}],"source":"CPE_RANGE"},{"vendor_product":"microsoft:windows_10_22h2","cpes":["cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.19045.6456"}],"source":"CPE_RANGE"},{"cpes":["cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.22621.6060"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_11_22h2"},{"vendor_product":"microsoft:windows_11_23h2","cpes":["cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"10.0.22631.6060"}],"source":"CPE_RANGE"},{"cpes":["cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.26100.6899"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_11_24h2"},{"cpes":["cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.26200.6899"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_11_25h2"},{"source":"CPE_RANGE","vendor_product":"microsoft:windows_server_2016","cpes":["cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"10.0.14393.8519"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.17763.7919"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_server_2019"},{"extracted_events":[{"fixed":"10.0.20348.4294"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_server_2022","cpes":["cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*"]},{"source":"CPE_RANGE","vendor_product":"microsoft:windows_server_2022_23h2","cpes":["cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.25398.1913"}]},{"source":"CPE_RANGE","vendor_product":"microsoft:windows_server_2025","cpes":["cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"10.0.26100.6899"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*"],"extracted_events":[{"introduced":"r2-sp1"},{"last_affected":"r2-sp1"}],"source":"CPE_STRING","vendor_product":"microsoft:windows_server_2008"},{"source":"CPE_STRING","vendor_product":"microsoft:windows_server_2012","cpes":["cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"r2"},{"last_affected":"r2"}]}]},"references":[{"type":"ADVISORY","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25004"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/powershell/powershell","events":[{"introduced":"1393d167f54466ec60c547b56f0c4d8326da7dc8"},{"fixed":"5a6ecbf8c98d6d6193c3dcbed75d3454adbbfd09"},{"introduced":"713e77f15f63bae9f23fb02045c7843ad6a8769b"},{"fixed":"7c8d9e7e0ed2fc1f2caf50746fe9fef720ca2a0a"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"7.4"},{"fixed":"7.4.13"},{"introduced":"7.5"},{"fixed":"7.5.4"}]}}],"versions":["v7.4.8","v7.4.11","v7.4.9","v7.4.7","v7.4.5","v7.4.4","v7.4.3","v7.4.2","v7.4.1","v7.4.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-25004.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"}]}