CVE-2025-25004

CVE-2025-25004 is a high-severity improper access control vulnerability in Microsoft PowerShell, allowing an authenticated local attacker to achieve privilege escalation. With a CVSS score of 7.3 (HIGH), successful exploitation could lead to high impact on confidentiality, integrity, and availability. The attack requires local access and user interaction, but is low complexity. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.