CVE-2025-49734

High

Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate…

secure@microsoft.com·CWE-923·Published 2025-09-09

CVSS

7.0

EPSS

0.00

KEV

Exploits

cve.orgen

150 chars

Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.

NVDen

150 chars

Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.0	—	—	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
3.1	Secondary	NVD	7.0	1.0	5.9