12 matches found
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause application crashes by supplying crafted WPF pixel-shader bytecode that desynchronizes parsing passes, leading to heap...
Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Crafted WPF...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause application crashes by supplying crafted WPF pixel-shader bytecode that desynchronizes parsing passes, leading to heap...
GHSA-PFWJ-2F93-RF42 Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Crafted WPF...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause application crashes by supplying crafted WPF pixel-shader bytecode that desynchronizes parsing passes, leading to heap...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via crafted pixel-shader bytecode in the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause a denial of service by enticing a user to open or interact with a malicious file or...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via crafted pixel-shader bytecode in the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause a denial of service by enticing a user to open or interact with a malicious file or...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via crafted pixel-shader bytecode in the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause a denial of service by enticing a user to open or interact with a malicious file or...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via crafted WPF pixel-shader bytecode in the CPSTrans::Initialize function. An attacker can achieve arbitrary code execution or cause application crashes by supplying maliciously crafted input that leads to heap...
GHSA-G44W-H65V-4CW9 Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Crafted WPF...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via crafted WPF pixel-shader bytecode in the CPSTrans::Initialize function. An attacker can achieve arbitrary code execution or cause application crashes by supplying maliciously crafted input that leads to heap...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via crafted WPF pixel-shader bytecode in the CPSTrans::Initialize function. An attacker can achieve arbitrary code execution or cause application crashes by supplying maliciously crafted input that leads to heap...