Critical Windows PowerShell 0-Day Vulnerability Disclosed

First seen 10 Dec 2025, 13:46 UTC • Gbhackers

•31

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Microsoft has disclosed a new 0-day vulnerability in Windows PowerShell, tracked as CVE-2025-54100, which allows attackers to execute arbitrary code on affected systems. The flaw arises from improper neutralization of special elements during command injection attacks and poses a significant risk to organizations globally. The vulnerability was publicly disclosed on December 9, 2025.

How this analysis works

Attack Flow

8 entities, 7 inferred relationships (STIX 2.1).

Technique (4)

Data Breach
Malware
Zero-day Exploit
T1059.001 - PowerShell

Organization (1)

Microsoft

Vulnerability (1)

CVE-2025-54100

Affected Platform (1)

Windows

Tool (1)

PowerShell

Relationships

PowerShell exploits CVE-2025-54100
CVE-2025-54100 targets Windows
Data Breach targets Windows
Malware targets Windows
Zero-day Exploit targets Windows
T1059.001 - PowerShell targets Windows
CVE-2025-54100 related to Microsoft

Continue Reading

Microsoft Office 0-day Vulnerability CVE-2026-21509 Exploited; Emergency Fix Released APT28 Exploits Zimbra Vulnerability in Ongoing Attacks Against Ukraine Microsoft SharePoint Attacks: Over 400 Victims Including US Agencies Russian SVR Exploits SolarWinds and Other Vulnerabilities Against U.S. Networks FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation Widespread DNS Poisoning Campaign Targets Hotel Wi-Fi to Steal Credentials

Critical Windows PowerShell 0-Day Vulnerability Disclosed

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading