Microsoft Visual Studio PowerShell Privilege Escalation Flaw
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
A privilege escalation vulnerability affects Microsoft Visual Studio 2019/2022/2026 and PowerShell 7.4-7.6; patches available, no reported active exploitation.
CERT-FR has issued an advisory regarding CVE-2026-111497, a privilege escalation vulnerability affecting multiple Microsoft products including Visual Studio 2019 (prior to 16.11.61), Visual Studio 2022 (prior to 17.14.43), Visual Studio 2026 (prior to 18.11.2 and 18.12 Insiders 3), and PowerShell versions 7.4, 7.5, and 7.6 (prior to 7.4.22, 7.5.13, and 7.6.9 respectively). The vulnerability allows an attacker to elevate privileges on affected systems.
No details on exploitation status are provided in the advisory, and no in-the-wild exploitation is mentioned. CERT-FR recommends organizations refer to the Microsoft security bulletin for the vulnerability, published on October 25, 2026, and apply the available patches to the affected Visual Studio and PowerShell versions to remediate the privilege escalation risk.
Mentioned in this report
Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1383
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 14,237 reports from 143 sources, 591 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them — about forty a week that are yours, not the four hundred that are not.
Create a free account What it costs