Microsoft PowerShell vulnerabilities

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.

Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.

Improper control of generation of code (code injection) in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

A vulnerability in Microsoft PowerShell is due to incorrect default permissions, allowing an authorized attacker to elevate privileges locally.