Windows PowerShell 0

Cybersecuritynews •Abinaya • December 10, 2025

Security update addressing a dangerous Windows PowerShell vulnerability that allows attackers to execute malicious code on affected systems. The vulnerability, tracked as CVE-2025-54100, was publicly disclosed on December 9, 2025, and represents a significant security risk for organizations worldwide. The flaw stems from improper neutralization of special elements in Windows PowerShell during command injection attacks. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Windows PowerShell 0-Day Vulnerability Disclosed Microsoft has disclosed a new 0-day vulnerability in Windows PowerShell, tracked as CVE-2025-54100, which allows attackers to execute arbitrary code on affected systems. The flaw arises from improper neutralization of special elements during command injection attacks and poses a significant risk to organizations globally. The vulnerability was publicly disclosed on December 9, 2025. 3 sources 31

Extracted Entities

Windows PowerShell 0

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)