Microsoft PowerShell 7.4.x < 7.4.21 / 7.5.x < 7.5.12 / 7.6.x < 7.6.7 RCE (macOS)

The version of Microsoft PowerShell installed on the remote macOS host is 7.4.x prior to 7.4.21, 7.5.x prior to 7.5.12, or 7.6.x prior to 7.6.7. It is, therefore, affected by a remote code execution vulnerability. Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows ...

Microsoft PowerShell 7.4.x < 7.4.21 / 7.5.x < 7.5.12 / 7.6.x < 7.6.7 Multiple Vulnerabilities (October 2026)

The version of Microsoft PowerShell installed on the remote host is 7.4.x prior to 7.4.21, 7.5.x prior to 7.5.12, or 7.6.x prior to 7.6.7. It is, therefore, affected by multiple vulnerabilities: - Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized...

CVE-2026-96303

Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96251

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network...

CVE-2026-96251

A security flaw in Microsoft PowerShell arises from the reliance on untrusted inputs during a security decision. This vulnerability allows an unauthorized attacker to achieve remote code execution over a network. The impact is characterized by high levels of confidentiality, integrity, and availa...

CVE-2026-96251

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network...

CVE-2026-96303

Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96303

Microsoft PowerShell contains an improperly implemented security check for standard, which allows an unauthorized attacker to bypass a security feature over a network . The vulnerability is associated with CWE-358 and carries a CVSS 3.1 base score of 6.5 (Medium severity). The attack vector is Ne...

Microsoft PowerShell Remote Code Execution Vulnerability

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network...

Microsoft PowerShell Security Feature Bypass Vulnerability

Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96251: Reliance on Untrusted Inputs in a Security Decision

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network...

PT-2026-113061

Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description Microsoft PowerShell contains a flaw where it relies on untrusted inputs when making security decisions. This allows an unauthorized attacker to execute arbitrary code over a...

CVE-2026-96303: Improperly Implemented Security Check for Standard

Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-113068

Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description An improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network. Recommendations At the...

PT-2026-79998

Improper neutralization of special elements used in a command 'command injection' in Microsoft PowerShell allows an authorized attacker to execute code locally...

PT-2026-80000

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...

PT-2026-79999

Server-side request forgery ssrf in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network...

BIT-POWERSHELL-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability

Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-50523

Improper neutralization of special elements used in a command 'command injection' in Microsoft PowerShell allows an authorized attacker to execute code locally...

CVE-2026-50523

CVE-2026-50523 : Microsoft PowerShell is affected by a vulnerability described as improper neutralization of special elements used in a command (command injection), allowing an authorized attacker to execute code locally. The CVSS 3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack ...