CVE-2025-54100

Published Dec 9, 2025

Last updated a day ago

Windows PowerShell

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-54100 is a command injection vulnerability in Windows PowerShell. It allows an unauthorized attacker with local access to execute arbitrary code. The vulnerability stems from improper neutralization of special elements used in command execution within PowerShell's command processing mechanism. To exploit this vulnerability, an attacker typically needs user interaction, such as tricking a victim into running a malicious PowerShell script or command. Once exploited, the attacker can inject malicious commands that PowerShell interprets and executes, potentially leading to system compromise or lateral movement inside the network.

Description: Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.
Source: secure@microsoft.com
NVD status: Analyzed
Products: windows_10_1607, windows_10_1809, windows_10_21h2, windows_10_22h2, windows_11_23h2, windows_11_24h2, windows_11_25h2, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022, windows_server_2022_23h2, windows_server_2025

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

secure@microsoft.com: CWE-77

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "B1A4A63C-AA10-4A4B-8FD6-0519D1F7DFE9",
            "versionEndExcluding": "10.0.14393.8688"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "BCB3A273-FB6E-43DC-A247-363179C2400C",
            "versionEndExcluding": "10.0.14393.8688"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "5CEB496A-8AF3-458D-B466-16204E535DE0",
            "versionEndExcluding": "10.0.17763.8146"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "C99D0580-E443-4440-A211-19BA3C2C4AFA",
            "versionEndExcluding": "10.0.17763.8146"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9D04167A-522C-433E-8CEB-C1D8A02C23D8",
            "versionEndExcluding": "10.0.19044.6691"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A86D6CDC-55E5-4817-A6CE-4CE41921FB79",
            "versionEndExcluding": "10.0.19045.6691"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6DCE32D0-A9E0-4029-AB35-5E202A42AF01",
            "versionEndExcluding": "10.0.22631.6345"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9B25382B-72D4-4462-9B2A-FC463E225975",
            "versionEndExcluding": "10.0.26100.7456"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C29A9FB0-C2BE-43DE-A099-0390A4AF47E1",
            "versionEndExcluding": "10.0.26200.7456"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "992FE0C2-27E6-4D04-8200-7831DE13C58E",
            "versionEndExcluding": "10.0.14393.8688"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A20DBDB1-D0DE-4800-8BEA-35EE5D53659D",
            "versionEndExcluding": "10.0.17763.8146"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5032F165-65AC-41E6-9AFC-50B2518E50F3",
            "versionEndExcluding": "10.0.20348.4529"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E9CE4A36-DA42-40CC-8724-E30A22CA84B6",
            "versionEndExcluding": "10.0.25398.2025"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0919675B-B03C-4A67-A8FC-DC953EA057C9",
            "versionEndExcluding": "10.0.26100.7456"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.