Windows apps · Application version · December 16, 2021

PowerShell Preview 7.3.0.1

PowerShell Preview 7.3.0.1, released December 16, 2021, fixes 14 CVEs in PowerShell Preview. None of them is reported as exploited. Patch Radar priority: Urgent. The latest PowerShell Preview is 7.6.0.101, which also fixes every one of these CVEs.

Urgent1 publicly disclosed

Superseded. The latest PowerShell Preview is 7.6.0.101, which also fixes every CVE on this page. Install that instead.

CVEs closed
14
5 rated Critical
Exploited
0
None reported
Highest CVSS
9.3
Base score, 0 to 10
Highest EPSS
0.0570
93rd percentile

Priority of the 14 CVEs

Patch now 0 Urgent 6 High 6 Routine 2

Applies to

ProductVersion
PowerShell Preview7.3.0.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2020-8927 Brotli Library Buffer Overflow Vulnerability7.5 0.0322 More likely
Urgent CVE-2023-36792 Visual Studio Remote Code Execution Vulnerability7.8 0.0123 Exploitation Less Likely
Urgent CVE-2023-36793 Visual Studio Remote Code Execution Vulnerability7.8 0.0123 Exploitation Less Likely
Urgent CVE-2023-36796 Visual Studio Remote Code Execution Vulnerability7.8 0.0123 Exploitation Less Likely
Urgent CVE-2023-24897 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability7.8 0.0118 Exploitation Less Likely
Urgent CVE-2023-21808 .NET and Visual Studio Remote Code Execution Vulnerability8.4 0.0115 Exploitation Less Likely
High CVE-2022-23267 .NET and Visual Studio Denial of Service Vulnerability7.5 0.0570 Exploitation Less Likely
High CVE-2022-34716 .NET Spoofing Vulnerability9.3 0.0252 Exploitation Less Likely
High CVE-2022-24512 .NET and Visual Studio Remote Code Execution Vulnerability8.8 0.0161 DisclosedExploitation Less Likely
High CVE-2023-36794 Visual Studio Remote Code Execution Vulnerability7.8 0.0123 N/A
High CVE-2023-33126 .NET and Visual Studio Remote Code Execution Vulnerability7.3 0.0100 Exploitation Less Likely
High CVE-2022-26788 PowerShell Elevation of Privilege Vulnerability7.8 0.0065 Exploitation Less Likely
Routine CVE-2023-36799 .NET Core and Visual Studio Denial of Service Vulnerability6.5 0.0464 Exploitation Less Likely
Routine CVE-2021-43896 Microsoft PowerShell Spoofing Vulnerability5.5 0.0245 Exploitation Less Likely
Showing 1 to 14 of 14 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.