PatchTheCVECVE-2026-96303: Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to
40
This month
MEDIUM 6.5WATCHLISTUPGRADE
CVE-2026-96303 is a medium-severity flaw (CVSS 6.5) affecting powershell. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.
Why this priority
- On your watchlist
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.5 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.6% (top 52%) |
| CISA exploited list | No |
| Weakness | CWE-358 |
| Published | 2026-10-13 |
| Last modified | 2026-10-22 |
Publisher (CNA): Microsoft Corporation · Vendor: microsoft
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
microsoft powershell UPGRADE
Affected: >= 7.4 and < 7.4.21 · >= 7.5 and < 7.5.12 · >= 7.6 and < 7.6.7
Fixed in: 7.4.21, 7.5.12, 7.6.7
Safe to downgrade to: a release before 7.4
1. Check installed version
apt-cache policy powershell || rpm -q powershell || powershell --version
2. UPGRADE to 7.4.21 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade powershell
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade powershell
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 7.4 (Debian / Ubuntu)
apt-cache madison powershell
sudo apt install powershell=<VERSION_BEFORE_7.4>
sudo apt-mark hold powershell
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list powershell
sudo dnf downgrade powershell-<VERSION_BEFORE_7.4>
sudo dnf versionlock add powershell
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Exact fixes by distribution
Fedora 46 · retext · FIXED · 8.1.0-1.fc46 · FEDORA-2026-0602a84203 · source
sudo dnf upgrade --advisory=FEDORA-2026-0602a84203
Advisories and coverage
Official advisories
- Microsoft MSRC Update Guide: CVE-2026-96303 Microsoft PowerShell Security Feature Bypass Vulnerability 2026-10-22
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Related CVEs
- CVE-2026-96251 HIGH 8.8 UPGRADE Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to