CVE-2020-16886

CVE-2020-16886 is a security feature bypass vulnerability in the PowerShellGet V2 module that allows an attacker to bypass Windows Defender Application Control (WDAC) policies. With administrator privileges, an attacker can inject and execute arbitrary code on a policy-locked machine. This vulnerability has a CVSS score of 6.7 (Medium), indicating high impact on confidentiality, integrity, and availability, but requires high privileges and local access. There is no evidence of active exploitation, public exploit code, or significant community discussion, though it was addressed in Microsoft's October 2020 Patch Tuesday.