A critical input validation vulnerability in Microsoft PowerShell allows unauthorized local attackers to bypass security controls, posing a significant risk of system-wide compromise.

The flaw is caused by improper input validation (CWE-20) within PowerShell, which can be triggered by an unauthorized local attacker to bypass established security features. Based on the CVSS vector, the attack requires local access and user interaction.

The ability for an attacker to bypass local security features can lead to unauthorized access to sensitive data, privilege escalation, or full system control. With a CVSS score of 7.8, this vulnerability is classified as High severity, indicating that the potential for impact on confidentiality, integrity, and availability is significant. Organizations should prioritize patching to prevent local attackers from escalating their level of access within the environment.

Immediate Action: Update all instances of Microsoft PowerShell to version 7.4.14, 7.5.5, or later as specified in the official Microsoft security advisory.

Proactive Monitoring: Review local system logs and audit trails for unusual command execution patterns or unauthorized attempts to bypass security policy enforcement.

Compensating Controls: Restrict local access to systems running affected versions of PowerShell to trusted users only and implement strict execution policies to limit the potential impact of malicious scripts.

Public Exploit Available: No (exploit_available: false)

Given the High severity of this vulnerability and the potential for total system impact, administrators should prioritize the deployment of the provided patches. Verify the version of PowerShell currently installed across all endpoints and apply the necessary updates immediately to eliminate the risk of security feature bypass.