{"id":"CVE-2025-49734","details":"Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.","aliases":["BIT-powershell-2025-49734"],"modified":"2026-09-22T03:45:14.605009410Z","published":"2025-09-09T17:15:48.057Z","database_specific":{"unresolved_ranges":[{"vendor_product":"microsoft:windows_10_1607","cpes":["cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*"],"extracted_events":[{"fixed":"10.0.14393.8422"},{"fixed":"10.0.14393.8422"}],"source":"CPE_RANGE"},{"vendor_product":"microsoft:windows_10_1809","cpes":["cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*"],"extracted_events":[{"fixed":"10.0.17763.7792"},{"fixed":"10.0.17763.7792"}],"source":"CPE_RANGE"},{"extracted_events":[{"fixed":"10.0.19044.6332"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_10_21h2","cpes":["cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*"]},{"extracted_events":[{"fixed":"10.0.19045.6332"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_10_22h2","cpes":["cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*"]},{"vendor_product":"microsoft:windows_11_22h2","cpes":["cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.22621.5909"}],"source":"CPE_RANGE"},{"cpes":["cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.22631.5909"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_11_23h2"},{"extracted_events":[{"fixed":"10.0.26100.6508"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_11_24h2","cpes":["cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*"]},{"source":"CPE_RANGE","vendor_product":"microsoft:windows_server_2016","cpes":["cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.14393.8422"}]},{"vendor_product":"microsoft:windows_server_2019","cpes":["cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.17763.7792"}],"source":"CPE_RANGE"},{"source":"CPE_RANGE","vendor_product":"microsoft:windows_server_2022","cpes":["cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.20348.4106"}]},{"extracted_events":[{"fixed":"10.0.25398.1849"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_server_2022_23h2","cpes":["cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*"]},{"vendor_product":"microsoft:windows_server_2025","cpes":["cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.26100.6508"}],"source":"CPE_RANGE"}]},"references":[{"type":"ADVISORY","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49734"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/powershell/powershell","events":[{"introduced":"1393d167f54466ec60c547b56f0c4d8326da7dc8"},{"fixed":"94beb9aebf68618babb191714e2872002984b2b0"},{"introduced":"713e77f15f63bae9f23fb02045c7843ad6a8769b"},{"fixed":"b72c7ab1238c2d95b5c9004bca8399b8b3ca88ac"}],"database_specific":{"cpe":"cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"7.4"},{"fixed":"7.4.12"},{"introduced":"7.5"},{"fixed":"7.5.3"}],"source":"CPE_RANGE"}}],"versions":["v7.4.8","v7.4.11","v7.4.9","v7.4.7","v7.4.5","v7.4.4","v7.4.3","v7.4.2","v7.4.1","v7.4.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-49734.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}