CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally. EPSS < 0.01 CVE-2026-70338 Microsoft US 11. 8. 2026 · Microsoft Security · CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability