4168 matches found
vulnerabilities handled in Microsoft Developer Tools
Microsoft has identified vulnerabilities in various Developer Tools. A malicious individual can exploit these vulnerabilities to carry out attacks that can cause damage, as listed in the table below. For successful exploitation, the malicious individual must deceive victims into importing and...
CVE-2026-70338
Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-70337
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network...
CVE-2026-70338
Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-70337
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network...
CVE-2026-59119
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
CVE-2026-59119
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
CVE-2026-58612
Server-side request forgery ssrf in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network...
CVE-2026-58612
Server-side request forgery ssrf in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network...
CVE-2026-70337
CVE-2026-70337 describes a relative path traversal in Microsoft PowerShell Core that can allow an unauthenticated attacker to execute code over a network. Affected software is the PowerShell Core component; the root cause is path traversal enabling remote code execution with a CVSS v3.1 score of ...
EUVD-2026-56768
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network...
CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
...
CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
...
CVE-2026-70337
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network...
EUVD-2026-56767
Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
...
CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
...
CVE-2026-70338
Microsoft PowerShell contains a code-injection style issue described as improper control of code generation, enabling a local attacker to bypass a built-in security feature. The CVSS 3.1 metrics from Microsoft indicate a high impact on confidentiality, integrity, and availability with local attac...