Microsoft PowerShell Remote Code Execution Vulnerability

Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.

PowerShell Information Disclosure Vulnerability

.NET - SecurityFeatureBypass - Denial of Service and Security Feature Bypass via Unsafe Transforms in EncryptedXml

End of life: 11/14/2028, Latest version: 7.6.5