CVE-2022-26788 PowerShell Elevation of Privilege Vulnerability

What is CVE-2022-26788?

CVE-2022-26788 is a high-severity vulnerability in Microsoft Windows 10, published on 15 Apr 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

PowerShell Elevation of Privilege Vulnerability

Which versions are affected by CVE-2022-26788?

7 open source packages ship an affected version, including Microsoft.PowerShell.SDK and powershell. It affects 10 products.

Products include Microsoft Powershell, Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows 8.1, Microsoft Windows Rt 8.1, Microsoft Windows Server 2008 and 4 more.

How do I fix CVE-2022-26788?

Upgrade Microsoft.PowerShell.SDK to a fixed version for your release line: 7.0.10, 7.1.7 or 7.2.3.

Is CVE-2022-26788 being exploited?

There is no known exploitation of CVE-2022-26788 in the wild and no public exploit code.

Other vulnerabilities in Microsoft Windows 10

• CVE-2018-8327 Code injection in PowerShell Editor Critical 9.8
• CVE-2026-96251 Microsoft PowerShell Remote Code Execution Vulnerability High 8.8
• CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability High 8.8
• CVE-2022-41076 PowerShell Remote Code Execution Vulnerability High 8.5
• CVE-2026-50523 Microsoft PowerShell Remote Code Execution Vulnerability High 7.8

All Microsoft Windows 10 vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as BIT-powershell-2022-26788, GHSA-q7x5-x7rr-2859.