CVE-2026-70337

CVE-2026-70337 describes a relative path traversal in Microsoft PowerShell Core that can allow an unauthenticated attacker to execute code over a network. Affected software is the PowerShell Core component; the root cause is path traversal enabling remote code execution with a CVSS v3.1 score of ...

CVE-2026-58612

CVE-2026-58612 : Server-side request forgery in Microsoft PowerShell Core can allow an unauthenticated attacker to disclose information over a network. The NVD entry lists a CVSS v3.1 base score of 7.4 (High) with NETWORK attack vector, LOW attack complexity, no privileges required, user interact...

CVE-2026-50523

CVE-2026-50523 : Microsoft PowerShell is affected by a vulnerability described as improper neutralization of special elements used in a command (command injection), allowing an authorized attacker to execute code locally. The CVSS 3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack ...

CVE-2026-59119

CVE-2026-59119 : The vulnerability is in Microsoft PowerShell, caused by incorrect default permissions that allow an authorized, local attacker to elevate privileges. The CVSS v3.1 base score is 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and user interact...

CVE-2026-26171

The entry CVE-2026-26171 describes a .NET Denial of Service vulnerability with a CVSSv3.1 base score of 7.5 (HIGH) and network exposure. Exploitation is possible without user interaction and with no privileges required, affecting availability. The provided reference points to a Microsoft update g...

CVE-2026-70338

Microsoft PowerShell contains a code-injection style issue described as improper control of code generation, enabling a local attacker to bypass a built-in security feature. The CVSS 3.1 metrics from Microsoft indicate a high impact on confidentiality, integrity, and availability with local attac...

CVE-2026-26143

The CVE-2026-26143 entry concerns Improper input validation in Microsoft PowerShell that allows a local attacker to bypass a security feature. The advisory set shows affected software as Microsoft PowerShell with a high impact (MITRE-style: Circumvention of security measure) and a high base score...