7.8
Élevée
CVE-2026-70338 Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to…
Description
Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PowerShell 7.4 7.4 | 7.4.0 → < 7.4.19.0 | 7.4.19.0 |
| PowerShell 7.5 7.5 | 7.5.0 → < 7.5.10.0 | 7.5.10.0 |
| PowerShell 7.6 7.6 | 7.6.0 → < 7.6.5 | 7.6.5 |
Références
- Microsoft PowerShell Security Feature Bypass Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de PowerShell 7.4
Les 22 CVE de PowerShell 7.4 →
CVE-2026-96303
Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a…
6.5
Moyenne
CVE-2026-96251
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute…
8.8
Élevée
CVE-2026-50523
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an…
7.8
Élevée
CVE-2026-70337
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network
8.8
Élevée