CVE Catalog
CVE-2026-70338
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.44%
36th percentile - higher than 36% of all known CVEs
Summary
Improper control of generation of code (code injection) in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
Risk Assessment
A local attacker could bypass security features, potentially leading to unauthorized command execution or privilege escalation.
Recommendation
Update Microsoft PowerShell to the latest version containing the security fix.
Original NVD description (English source)
Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.