Veille CVE

Vendredi 14 août 2026

2 CVE

  1. CVE-2026-70338 7.8 Élevée

    Microsoft PowerShell 7.4 · Microsoft PowerShell 7.5 · Microsoft PowerShell 7.6 · Microsoft powershell

    Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

  2. CVE-2026-70337 8.8 Élevée

    Microsoft PowerShell 7.4 · Microsoft PowerShell 7.5 · Microsoft PowerShell 7.6 · Microsoft powershell

    Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.