High · published August 11, 2026
Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/powershell | ≥ 7.4, < 7.4.19.0 | 7.4.19.0 |
| microsoft/powershell | ≥ 7.5, < 7.5.10.0 | 7.5.10.0 |
| microsoft/powershell | ≥ 7.6, < 7.6.5 | 7.6.5 |