Tracker / CVE-2026-70338
CVE-2026-70338
High 7.8
Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
Affected products and versions
| microsoft | powershell · 7.4 → 7.4.19.0 |
|---|---|
| microsoft | powershell · 7.5 → 7.5.10.0 |
| microsoft | powershell · 7.6 → 7.6.5 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.