3837 matches found
CVE-2026-73250 Notepad++: Install-time PowerShell command injection through installation path
Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory $INSTDIR from PowerEditor/installer/nppSetup.nsi into a PowerShell -Command string used by RegisterMSIX to invoke...
vulnerabilities handled in Microsoft Developer Tools
Microsoft has identified vulnerabilities in various Developer Tools. A malicious individual can exploit these vulnerabilities to carry out attacks that can cause damage, as listed in the table below. For successful exploitation, the malicious individual must deceive victims into importing and...
CVE-2026-70337
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network...
CVE-2026-70338
Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-70338
Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-70337
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network...
CVE-2026-59119
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
CVE-2026-59119
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
CVE-2026-58612
Server-side request forgery ssrf in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network...
CVE-2026-58612
Server-side request forgery ssrf in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network...
EUVD-2026-56768
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network...
CVE-2026-70337
CVE-2026-70337 describes a relative path traversal in Microsoft PowerShell Core that can allow an unauthenticated attacker to execute code over a network. Affected software is the PowerShell Core component; the root cause is path traversal enabling remote code execution with a CVSS v3.1 score of ...
CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
...
CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
...
CVE-2026-70337
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network...
CVE-2026-70338
Microsoft PowerShell contains a code-injection style issue described as improper control of code generation, enabling a local attacker to bypass a built-in security feature. The CVSS 3.1 metrics from Microsoft indicate a high impact on confidentiality, integrity, and availability with local attac...
CVE-2026-70338
Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
...