CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

shells/libpowershell-native7.4.0

Support library for PowerShell

Maintainer
arrowd@FreeBSD.org
Packages
libpowershell-native 7.4.0
Upstream
Higher version available: 7.6.8
CPE
microsoft:powershell
WWW
https://microsoft.com/PowerShell
Links
cgit · VuXML

Unaddressed (16) · The CVE record lists this version as affected, no VuXML entry names the CVE

Updating to 7.4.21 would fix 14 of 16 unaddressed CVEs, according to the CVE records.
Fixed up to each version, cumulative: 7.4.2 2 · 7.4.3 3 · 7.4.11 4 · 7.4.12 5 · 7.4.13 6 · 7.4.14 7 · 7.4.19.0 12 · 7.4.21 14
CVE-2024-00579.12024-01-09NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
CVE-2026-962518.82026-10-13Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
CVE-2026-703378.82026-08-11Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
CVE-2026-505237.82026-08-14Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
CVE-2026-703387.82026-08-11Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-261437.82026-04-14Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-303997.52025-06-13Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2024-261907.52024-03-12Microsoft QUIC Denial of Service Vulnerability
CVE-2024-213927.52024-03-12.NET and Visual Studio Denial of Service Vulnerability
CVE-2026-586127.42026-08-11Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.
CVE-2026-591197.32026-08-11Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
CVE-2025-250047.32025-10-14Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
CVE-2024-214097.32024-04-09.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2025-497347.02025-09-09Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.
CVE-2026-963036.52026-10-13Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.
CVE-2024-300456.32024-05-14.NET and Visual Studio Remote Code Execution Vulnerability

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (3)

Gleb Popov (arrowd) · 7.4.0
shells/libpowershell-native: Fix building with CMake 4
6e069f2964
Gleb Popov (arrowd) · 7.4.0
shells/libpowershell-native: Fix build on FreeBSD 13

Reported by:	kib
1d93b51a01
Gleb Popov (arrowd) · 7.4.0
shells/libpowershell-native: Support library for PowerShell
9b1c65d078