CVE-2025-25004CWE-284

PowerShell Elevation of Privilege Vulnerability

High · published October 14, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
40.1
In the wild
Unconfirmed
What it is

⚡ An authorized attacker can elevate their privileges in Microsoft PowerShell, turning their basic access into superuser permissions! This sneaky flaw poses a serious risk! 🔥 Think of it like a restaurant where a customer finds a way to access the staff-only area, acquiring the ability to change the menu and mess with orders. Without a proper bouncer checking the credentials, anyone can wreak havoc! If exploited, this vulnerability allows an attacker to gain control over sensitive operations and data, essentially becoming the 'chef' in the kitchen without permission. This could lead to unauthorized access to confidential information, data manipulation, and even the potential to disrupt system operations altogether!

Put simply

Think of it like a restaurant where a customer finds a way to access the staff-only area, acquiring the ability to change the menu and mess with orders. Without a proper bouncer checking the credentials, anyone can wreak havoc! This issue arises from improper access control in PowerShell that allows someone with legitimate access to elevate their privileges, bypassing the intended restrictions and gaining unauthorized control over system functions.

What to do

If exploited, this vulnerability allows an attacker to gain control over sensitive operations and data, essentially becoming the 'chef' in the kitchen without permission. This could lead to unauthorized access to confidential information, data manipulation, and even the potential to disrupt system operations altogether! To protect your system, ensure that all PowerShell policies are reviewed and updated to limit access strictly to necessary users. Regularly monitor user privileges and apply the latest security updates from Microsoft to mitigate this risk. It's time to tighten those security measures! You’ve got this! Take action now, and you’ll keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00476 · 40.1th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-10-14T17:00Z
EPSS history
Timeline
  • 14 OCT 17:00Z
    PowerShell Elevation of Privilege Vulnerability
    cvelistv5