{"id":"CVE-2026-85817","published":"2026-10-13T19:21:06.487","lastModified":"2026-10-16T19:58:55.693","description":"Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-807"],"vendors":["microsoft"],"products":["windows 10 1607","windows 10 1809","windows 10 21h2","windows 10 22h2","windows 11 23h2","windows 11 24h2","windows 11 25h2","windows 11 26h1","windows 11 26h2","windows server 2012","windows server 2016","windows server 2019"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85817","tags":["Vendor Advisory","Patch"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Windows PowerShell contains a security flaw where it relies on untrusted inputs when making security decisions, allowing remote attackers to execute arbitrary code on affected systems. This vulnerability stems from insufficient validation of input data used in security contexts.","exploitability":"Exploitation requires a network-based attack where an attacker can provide untrusted input to PowerShell, with no additional preconditions needed beyond system accessibility.","blast_radius":"The vulnerability affects multiple Windows versions including Windows 10 and 11, potentially allowing attackers to execute code across a wide range of enterprise endpoints with minimal effort.","remediation":"Deploy the Microsoft security update KB5042879 for Windows 10 version 1607, Windows 10 version 1809, Windows 10 version 21H2, Windows 10 version 22H2, Windows 11 version 23H2, Windows 11 version 24H2, and Windows 11 version 25H2.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","powershell","remote"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:00:25.454Z"}}