Veille CVE

Mardi 11 août 2026

4 CVE

Critique 0 Élevée 4 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft PowerShell 7.6 » ✕
  1. CVE-2026-70338 7.8 Élevée

    Microsoft PowerShell 7.4 · Microsoft PowerShell 7.5 · Microsoft PowerShell 7.6 · Microsoft powershell

    Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

  2. CVE-2026-70337 8.8 Élevée

    Microsoft PowerShell 7.4 · Microsoft PowerShell 7.5 · Microsoft PowerShell 7.6 · Microsoft powershell

    Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.

  3. CVE-2026-59119 7.3 Élevée

    Microsoft PowerShell 7.4 · Microsoft PowerShell 7.5 · Microsoft PowerShell 7.6 · Microsoft powershell

    Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

  4. CVE-2026-58612 7.5 Élevée

    Microsoft PowerShell 7.4 · Microsoft PowerShell 7.5 · Microsoft PowerShell 7.6 · Microsoft powershell

    Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.