Microsoft PowerShell 7.6 vulnerabilities

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.

Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.

Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.

Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network.

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.