Powershell Core
21 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Powershell Core, a product in the devtools ci space. Use it to gauge the current risk picture and drill into individual advisories.
Powershell Core CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 21 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High15
- Medium6
Latest CVEs
The 15 most recently published vulnerabilities affecting Powershell Core.
- CVE-2021-34485.NET Core and Visual Studio Information Disclosure Vulnerability5.0
- CVE-2021-26423.NET Core and Visual Studio Denial of Service Vulnerability7.5
- CVE-2021-26701.NET Core Remote Code Execution Vulnerability8.1
- CVE-2021-1721.NET Core and Visual Studio Denial of Service Vulnerability6.5
- CVE-2020-1108.NET Core & .NET Framework Denial of Service Vulnerability7.5
- CVE-2019-1301A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'.7.5
- CVE-2019-1167A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement, aka 'Windows Defender Application Control Sec...4.1
- CVE-2019-0980A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique f...7.5
- CVE-2019-0981A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique f...7.5
- CVE-2019-0733A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement, aka 'Windows Defender Application Control Sec...5.3
- CVE-2019-0627A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2...7.8
- CVE-2019-0631A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2...7.8
- CVE-2019-0657A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.5.9
- CVE-2019-0632A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2...7.8
- CVE-2018-8256A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execution Vulnerability." This affects Windows RT 8.1,...8.8
Product grouping is registry-driven, with AI assist and human review. How it works