CVE-2026-70338
No fix known EPSS <1%CVSS 7.8
Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
Products: Microsoft PowerShell 7.4, Microsoft PowerShell 7.5, Microsoft PowerShell 7.6