{"id":"CVE-2026-83578","published":"2026-10-13T19:20:00.457","lastModified":"2026-10-16T16:21:08.900","description":"Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122","CWE-190","CWE-191"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83578","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Windows PowerShell contains an integer underflow vulnerability that allows remote attackers to execute arbitrary code when processing certain input values. This critical flaw can be exploited over the network without authentication, making it particularly dangerous for systems with PowerShell exposed to untrusted networks.","exploitability":"Exploitation is likely straightforward for remote attackers with minimal preconditions, requiring only network access to a system running PowerShell with vulnerable components.","blast_radius":"The vulnerability could affect numerous Windows systems across enterprise environments since PowerShell is widely used for automation and management tasks, potentially allowing attackers to gain full system compromise.","remediation":"Apply the latest Windows updates that include the PowerShell fix for CVE-2026-83578, specifically targeting the integer underflow in PowerShell's handling of numeric values.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","powershell","remote"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:49:07.590Z"}}