# Microsoft Visual Studio PowerShell Privilege Escalation Flaw

Published: 2026-10-26 · Severity: elevated
Canonical: https://vorant.io/reports/a31e75c7-7fad-5858-ae3f-d60a9ac59ef3/microsoft-visual-studio-powershell-privilege-escalation-flaw

> A privilege escalation vulnerability affects Microsoft Visual Studio 2019/2022/2026 and PowerShell 7.4-7.6; patches available, no reported active exploitation.

CERT-FR has issued an advisory regarding CVE-2026-111497, a privilege escalation vulnerability affecting multiple Microsoft products including Visual Studio 2019 (prior to 16.11.61), Visual Studio 2022 (prior to 17.14.43), Visual Studio 2026 (prior to 18.11.2 and 18.12 Insiders 3), and PowerShell versions 7.4, 7.5, and 7.6 (prior to 7.4.22, 7.5.13, and 7.6.9 respectively). The vulnerability allows an attacker to elevate privileges on affected systems.

No details on exploitation status are provided in the advisory, and no in-the-wild exploitation is mentioned. CERT-FR recommends organizations refer to the Microsoft security bulletin for the vulnerability, published on October 25, 2026, and apply the available patches to the affected Visual Studio and PowerShell versions to remediate the privilege escalation risk.

## Mentioned in this report

- Vulnerabilities: CVE-2026-111497 (templated)

Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1383

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/a31e75c7-7fad-5858-ae3f-d60a9ac59ef3/microsoft-visual-studio-powershell-privilege-escalation-flaw.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup