3227 matches found
EUVD-2026-22800
PowerShell Command Injection in Podman HyperV Machine...
PowerShell Command Injection in Podman HyperV Machine
Summary A command injection vulnerability exists in Podman's HyperV machine backend. The VM image path is inserted into a PowerShell double-quoted string without sanitization, allowing $ subexpression injection. Affected Code File: pkg/machine/hyperv/stubber.go:647 go resize :=...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection via the Resize-VHD PowerShell command construction process. An attacker can execute arbitrary PowerShell commands with the privileges of the affected process by supplying a crafted VM image path containing malicious...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection via the Resize-VHD PowerShell command construction process. An attacker can execute arbitrary PowerShell commands with the privileges of the affected process by supplying a crafted VM image path containing malicious...
GHSA-HC8W-H2MF-HP59 PowerShell Command Injection in Podman HyperV Machine
Summary A command injection vulnerability exists in Podman's HyperV machine backend. The VM image path is inserted into a PowerShell double-quoted string without sanitization, allowing $ subexpression injection. Affected Code File: pkg/machine/hyperv/stubber.go:647 go resize :=...
Vulnerabilities fixed in Microsoft Developer tools
Microsoft has fixed vulnerabilities in .NET, .NET Framework, Visual Studio and PowerShell. A malicious party can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Accessing sensitive data - Circumvention of a security...
EUVD-2026-22402
Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
EUVD-2026-22369
Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-26170
Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
CVE-2026-26143
Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-26143
Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...
Improper Validation of Specified Quantity in Input
Overview PowerShell is a package containing the PowerShell global tool Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input in the IsSafeValueVisitor function when SkipLimitCheck is true and used with Import-PowerShellDataFile. An attacker can...
CVE-2026-26170 PowerShell Elevation of Privilege Vulnerability
...
CVE-2026-26170
CVE-2026-26170 is a PowerShell elevation of privilege vulnerability described as requiring local access with low privileges and no user interaction. CVSS 3.1 base score 7.8 (HIGH) with high impact on confidentiality, integrity, and availability; exploit code maturity is UNPROVEN. The entry notes ...
CVE-2026-26170 PowerShell Elevation of Privilege Vulnerability
...
CVE-2026-26143 Microsoft PowerShell Security Feature Bypass Vulnerability
...
CVE-2026-26143
The CVE-2026-26143 entry concerns Improper input validation in Microsoft PowerShell that allows a local attacker to bypass a security feature. The advisory set shows affected software as Microsoft PowerShell with a high impact (MITRE-style: Circumvention of security measure) and a high base score...
CVE-2026-26143 Microsoft PowerShell Security Feature Bypass Vulnerability
...
