{"id":"CVE-2025-49734","details":"Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.","aliases":["BIT-powershell-2025-49734"],"modified":"2026-09-14T03:45:12.679690410Z","published":"2025-09-09T17:15:48.057Z","database_specific":{"unresolved_ranges":[{"source":"CPE_RANGE","vendor_product":"microsoft:windows_10_1607","cpes":["cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*"],"extracted_events":[{"fixed":"10.0.14393.8422"},{"fixed":"10.0.14393.8422"}]},{"cpes":["cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*"],"extracted_events":[{"fixed":"10.0.17763.7792"},{"fixed":"10.0.17763.7792"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_10_1809"},{"cpes":["cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.19044.6332"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_10_21h2"},{"source":"CPE_RANGE","vendor_product":"microsoft:windows_10_22h2","cpes":["cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.19045.6332"}]},{"source":"CPE_RANGE","vendor_product":"microsoft:windows_11_22h2","cpes":["cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.22621.5909"}]},{"source":"CPE_RANGE","vendor_product":"microsoft:windows_11_23h2","cpes":["cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.22631.5909"}]},{"vendor_product":"microsoft:windows_11_24h2","cpes":["cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.26100.6508"}],"source":"CPE_RANGE"},{"source":"CPE_RANGE","vendor_product":"microsoft:windows_server_2016","cpes":["cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.14393.8422"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.17763.7792"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_server_2019"},{"source":"CPE_RANGE","vendor_product":"microsoft:windows_server_2022","cpes":["cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.20348.4106"}]},{"source":"CPE_RANGE","vendor_product":"microsoft:windows_server_2022_23h2","cpes":["cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.25398.1849"}]},{"extracted_events":[{"fixed":"10.0.26100.6508"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_server_2025","cpes":["cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*"]}]},"references":[{"type":"ADVISORY","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49734"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/powershell/powershell","events":[{"introduced":"60226d41612be32bc6bc65e4ab53820f9c9103d8"},{"fixed":"ec11fecf20f4ee8b330f5f58533812395cdfe90e"},{"introduced":"cfd566209cb91006362e18bdaefe1d203305fd0a"},{"fixed":"34371afd1ac738ff952750c0385c7c91253ad9be"}],"database_specific":{"cpe":"cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"7.4"},{"fixed":"7.4.12"},{"introduced":"7.5"},{"fixed":"7.5.3"}],"source":"CPE_RANGE"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-49734.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}