EUVD-2025-202201

Improper neutralization of special elements used in a command 'command injection' in Windows PowerShell allows an unauthorized attacker to execute code locally...

CVE-2025-54100

CVE-2025-54100 is a PowerShell RCE vulnerability tied to improper neutralization during MSHTML-based HTML parsing when Invoke-WebRequest is used without -UseBasicParsing. Affected: Windows PowerShell 5.1 on Windows 10/11 and Windows Server 2008–2025; attack is locally exploitable with user intera...

Storm-0249 Escalates Ransomware Attacks with ClickFix, Fileless PowerShell, and DLL Sideloading

The threat actor known as Storm-0249 is likely shifting from its role as an initial access broker to adopt a combination of more advanced tactics like domain spoofing, DLL side-loading, and fileless PowerShell execution to facilitate ransomware attacks. "These methods allow them to bypass defense...

New BYOVD loader behind DeadLock ransomware attack

While tracking ransomware activities, Cisco Talos uncovered new tactics, techniques, and procedures TTPs linked to a financially motivated threat actor targeting victims with DeadLock ransomware. The actor used the Bring Your Own Vulnerable Driver BYOVD technique with a previously unknown loader ...

STAC6565 Targets Canada in 80% of Attacks as Gold Blade Deploys QWCrypt Ransomware

Canadian organizations have emerged as the focus of a targeted cyber campaign orchestrated by a threat activity cluster known as STAC6565. Cybersecurity company Sophos said it investigated almost 40 intrusions linked to the threat actor between February 2024 and August 2025. The campaign is...

October 14, 2025—KB5066782 (OS Build 20348.4294)

None None...

December 9, 2025—KB5071507 (Security-only update)

None None...

December 9, 2025—KB5071547 (OS Build 20348.4529)

None None...

December 9, 2025—KB5071542 (OS Build 25398.2025)

None None...

KB5074204: Security Update for Windows PowerShell (OS Builds 26100.7392 and 26200.7392)

None None...

KB5074353: Security Update for Windows PowerShell (OS Build 20348.4467)

None None...

December 9, 2025—KB5071543 (OS Build 14393.8688)

None None...

December 9, 2025—KB5071544 (OS Build 17763.8146)

None None...

PowerShell Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Windows PowerShell allows an unauthorized attacker to execute code locally...

December 9, 2025—KB5071504 (Monthly Rollup)

None None...

December 9, 2025—KB5071546 (OS Builds 19045.6691 and 19044.6691)

None None...

December 9, 2025—KB5071506 (Security-only update)

None None...

December 9, 2025—KB5071501 (Monthly Rollup)

None None...

Microsoft Windows PowerShell 命令注入漏洞

Microsoft Windows PowerShell is a command line shell program and scripting environment from Microsoft Corporation USA that enables command line users and script writers to take advantage of . A command injection vulnerability exists in Microsoft Windows PowerShell. An attacker could exploit the...

KLA90811 Multiple vulnerabilities in Microsoft Product (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, spoof user interface, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a...