CVE-2022-41076

Deeper analysis

CVE-2022-41076 is a remote code execution vulnerability affecting PowerShell, as indicated by its published description and CVSS 3.1 vector of AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H. The flaw permits an attacker to execute arbitrary code with impacts across confidentiality, integrity, and availability, and the changed scope metric shows that exploitation can affect components beyond the initially vulnerable PowerShell instance.

An authenticated user with low privileges can exploit the issue over a network connection, though the high attack complexity requirement limits the ease of successful attacks. Successful exploitation grants the ability to run code that affects the broader system or environment rather than remaining confined to the PowerShell process.

Microsoft security advisories published at the referenced MSRC URLs provide official guidance and patches for the vulnerability. The current EPSS score of 0.3402, with a recorded peak of 0.3756, reflects moderate exploitation probability without documented evidence of widespread real-world attacks.