Yüksek CVSS 7.8
CVE-2025-54100: Windows 10 1607: komut enjeksiyonu
Açıklama (NVD)
Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.
Özet bilgiler
- Ürün
- Microsoft Windows 10 1607
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- %2,23 (yüzdelik 83)
- CWE
- CWE-77
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| microsoft-windows-10-1607 | — | — | 10.0.14393.8688 |
| microsoft-windows-10-1607 | — | — | 10.0.14393.8688 |
| microsoft-windows-10-1809 | — | — | 10.0.17763.8146 |
| microsoft-windows-10-1809 | — | — | 10.0.17763.8146 |
| microsoft-windows-10-21h2 | — | — | 10.0.19044.6691 |
| microsoft-windows-10-22h2 | — | — | 10.0.19045.6691 |
| microsoft-windows-11-23h2 | — | — | 10.0.22631.6345 |
| microsoft-windows-11-24h2 | — | — | 10.0.26100.7456 |
| microsoft-windows-11-25h2 | — | — | 10.0.26200.7456 |
| microsoft-windows-server-2008 | — | — | — |
| microsoft-windows-server-2008 | — | — | — |
| microsoft-windows-server-2008 | r2 | r2 | — |
| microsoft-windows-server-2012 | — | — | — |
| microsoft-windows-server-2012 | r2 | r2 | — |
| microsoft-windows-server-2016 | — | — | 10.0.14393.8688 |
| microsoft-windows-server-2019 | — | — | 10.0.17763.8146 |
| microsoft-windows-server-2022 | — | — | 10.0.20348.4529 |
| microsoft-windows-server-2022-23h2 | — | — | 10.0.25398.2025 |
| microsoft-windows-server-2025 | — | — | 10.0.26100.7456 |