Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
WDAC and PowerShell CLM bypass, not something you get in evey Patch Tuesday https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70338
Post summary
The post references a Windows security bypass vulnerability (CVE‑2026‑70338) and provides a link to Microsoft’s advisory, but it offers no PoC, exploit code, evidence of active exploitation, or patch details.
CVE-2026-70338 Local Code Injection in Microsoft PowerShell Bypasses Security Feature https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-70338
Post summary
The text references CVE-2026-70338 as a local code injection bug in Microsoft PowerShell that bypasses a security feature, but provides no details on PoC, exploit code, active attacks, or remediation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | powershell | - | - | - |