Mardi 11 août 2026
4 CVE
-
CVE-2026-70338 7.8 Élevée
Microsoft PowerShell 7.4 · Microsoft PowerShell 7.5 · Microsoft PowerShell 7.6 · Microsoft powershell
Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
-
CVE-2026-70337 8.8 Élevée
Microsoft PowerShell 7.4 · Microsoft PowerShell 7.5 · Microsoft PowerShell 7.6 · Microsoft powershell
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
-
CVE-2026-59119 7.3 Élevée
Microsoft PowerShell 7.4 · Microsoft PowerShell 7.5 · Microsoft PowerShell 7.6 · Microsoft powershell
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
-
CVE-2026-58612 7.5 Élevée
Microsoft PowerShell 7.4 · Microsoft PowerShell 7.5 · Microsoft PowerShell 7.6 · Microsoft powershell
Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.