← Database

CVE-2026-70338

HIGH CVSS: 7.8 Published: 2026-08-11 Modified: 2026-08-14

Description

Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

Affected Platforms

Microsoft Powershell

Weakness Type

CWE-94

References