{"id":"CVE-2025-25004","details":"Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.","aliases":["BIT-powershell-2025-25004"],"modified":"2026-10-24T10:30:42.897160846Z","published":"2025-10-14T17:15:39.380Z","database_specific":{"unresolved_ranges":[{"vendor_product":"microsoft:powershell","cpes":["cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"introduced":"7.4"},{"fixed":"7.4.13"},{"introduced":"7.5"},{"fixed":"7.5.4"}],"source":"CPE_RANGE"}]},{"cpes":["cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*"],"extracted_events":[{"range":[{"fixed":"10.0.10240.21161"},{"fixed":"10.0.10240.21161"}],"source":"CPE_RANGE"}],"vendor_product":"microsoft:windows_10_1507"},{"cpes":["cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*"],"extracted_events":[{"source":"CPE_RANGE","range":[{"fixed":"10.0.14393.8519"},{"fixed":"10.0.14393.8519"}]}],"vendor_product":"microsoft:windows_10_1607"},{"extracted_events":[{"range":[{"fixed":"10.0.17763.7919"},{"fixed":"10.0.17763.7919"}],"source":"CPE_RANGE"}],"vendor_product":"microsoft:windows_10_1809","cpes":["cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*"]},{"cpes":["cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"fixed":"10.0.19044.6456"}],"source":"CPE_RANGE"}],"vendor_product":"microsoft:windows_10_21h2"},{"cpes":["cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"fixed":"10.0.19045.6456"}],"source":"CPE_RANGE"}],"vendor_product":"microsoft:windows_10_22h2"},{"extracted_events":[{"range":[{"fixed":"10.0.22621.6060"}],"source":"CPE_RANGE"}],"vendor_product":"microsoft:windows_11_22h2","cpes":["cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*"]},{"extracted_events":[{"range":[{"last_affected":"10.0.22631.6060"}],"source":"CPE_RANGE"}],"vendor_product":"microsoft:windows_11_23h2","cpes":["cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*"]},{"extracted_events":[{"range":[{"fixed":"10.0.26100.6899"}],"source":"CPE_RANGE"}],"vendor_product":"microsoft:windows_11_24h2","cpes":["cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*"]},{"vendor_product":"microsoft:windows_11_25h2","cpes":["cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"fixed":"10.0.26200.6899"}],"source":"CPE_RANGE"}]},{"extracted_events":[{"range":[{"last_affected":"10.0.14393.8519"}],"source":"CPE_RANGE"}],"vendor_product":"microsoft:windows_server_2016","cpes":["cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_RANGE","range":[{"fixed":"10.0.17763.7919"}]}],"vendor_product":"microsoft:windows_server_2019"},{"vendor_product":"microsoft:windows_server_2022","cpes":["cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"fixed":"10.0.20348.4294"}],"source":"CPE_RANGE"}]},{"extracted_events":[{"source":"CPE_RANGE","range":[{"fixed":"10.0.25398.1913"}]}],"vendor_product":"microsoft:windows_server_2022_23h2","cpes":["cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*"]},{"extracted_events":[{"range":[{"last_affected":"10.0.26100.6899"}],"source":"CPE_RANGE"}],"vendor_product":"microsoft:windows_server_2025","cpes":["cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*"]},{"extracted_events":[{"range":[{"introduced":"r2-sp1"},{"last_affected":"r2-sp1"}],"source":"CPE_STRING"}],"vendor_product":"microsoft:windows_server_2008","cpes":["cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*"]},{"vendor_product":"microsoft:windows_server_2012","cpes":["cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_STRING","range":[{"introduced":"r2"},{"last_affected":"r2"}]}]}]},"references":[{"type":"ADVISORY","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25004"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/powershell/powershell","events":[{"introduced":"1393d167f54466ec60c547b56f0c4d8326da7dc8"},{"fixed":"5a6ecbf8c98d6d6193c3dcbed75d3454adbbfd09"},{"introduced":"713e77f15f63bae9f23fb02045c7843ad6a8769b"},{"fixed":"7c8d9e7e0ed2fc1f2caf50746fe9fef720ca2a0a"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*","range":[{"introduced":"7.4"},{"fixed":"7.4.13"}],"source":"CPE_RANGE"},{"range":[{"introduced":"7.5"},{"fixed":"7.5.4"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*"}]}}],"versions":["v7.4.8","v7.4.11","v7.4.9","v7.4.7","v7.4.5","v7.4.4","v7.4.3","v7.4.2","v7.4.1","v7.4.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-25004.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"}]}