{"id":"CVE-2022-26788","details":"PowerShell Elevation of Privilege Vulnerability","aliases":["BIT-powershell-2022-26788","GHSA-q7x5-x7rr-2859"],"modified":"2026-07-07T08:51:49.689474787Z","published":"2022-04-15T19:15:12.750Z","database_specific":{"unresolved_ranges":[{"source":"CPE_STRING","vendor_product":"microsoft:windows_10","cpes":["cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"20h2"},{"last_affected":"20h2"},{"introduced":"21h1"},{"last_affected":"21h1"},{"introduced":"21h2"},{"last_affected":"21h2"},{"introduced":"1607"},{"last_affected":"1607"},{"introduced":"1809"},{"last_affected":"1809"},{"introduced":"1909"},{"last_affected":"1909"}]},{"source":"CPE_STRING","vendor_product":"microsoft:windows_server_2008","cpes":["cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*"],"extracted_events":[{"introduced":"r2-sp1"},{"last_affected":"r2-sp1"}]},{"vendor_product":"microsoft:windows_server_2012","cpes":["cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"r2"},{"last_affected":"r2"}],"source":"CPE_STRING"},{"vendor_product":"microsoft:windows_server_2016","cpes":["cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"20h2"},{"last_affected":"20h2"}],"source":"CPE_STRING"}]},"references":[{"type":"WEB","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26788"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/powershell/powershell","events":[{"introduced":"b54b188c1804d4dcebb09a8be3a67916abd94fd7"},{"fixed":"2deb3f12ea4397eecf90f49211b7e5f48bff83f2"},{"introduced":"fa01333bfeef5dd7769143e2b4ec7ffdb70c62c8"},{"fixed":"d1720b8fd0e1d3945f38f8c1dc66d7159dfefd32"},{"introduced":"bec5c36d9da67bfcf5b88834f03b326c89f100c5"},{"fixed":"4f25173d9738ab64eb158cbaa2da1d16ac4c0c94"}],"database_specific":{"extracted_events":[{"introduced":"7.0"},{"fixed":"7.0.10"},{"introduced":"7.1"},{"fixed":"7.1.7"},{"introduced":"7.2"},{"fixed":"7.2.3"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*"}}],"versions":["v7.0.9","v7.1.6","v7.2.2","v7.0.8","v7.1.5","v7.2.1","v7.2.0","v7.1.4","v7.0.7","v7.0.6","v7.1.3","v7.0.5","v7.1.2","v7.0.4","v7.1.1","v7.1.0","v7.0.3","v7.0.2","v7.0.1","v7.0.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-26788.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}