CVE-2026-96303

6.5 medium SSVC exploitation: none Analyzed

Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.

Fix

Microsoft's update · Important

Release Notes — PowerShell 7.5 · build 7.5.12
Release Notes — PowerShell 7.4 · build 7.4.21
Release Notes — PowerShell 7.6 · build 7.6.8

From the 2026-Oct release note of Microsoft's Security Update Guide, revised 2026-10-28 · Exploitation Less Likely.

Patch, vendor advisory and mitigation references on NVD 1

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96303 Vendor Advisory

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 4

2026-10-20 01:23Cpes+1 CPE criteria (now 1)NVD modified 2026-10-20 00:33
2026-10-20 01:23StatusPublished → AnalyzedNVD modified 2026-10-20 00:33
2026-10-19 23:49StatusAwaiting Analysis → PublishedNVD modified 2026-10-19 19:40
2026-10-15 00:47First seenCVSS 6.5NVD modified 2026-10-13 23:19

Affected (CPE criteria) 1

cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*

References 1

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96303 Vendor Advisory