24 matches found
GHSA-2969-4Q4W-W5H3 Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An elevation of privilege...
UBUNTU-CVE-2026-50650
Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...
UBUNTU-CVE-2026-50646
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...
UBUNTU-CVE-2026-50649
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...
September 9, 2025-KB5064403 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2 and Windows 11, version 23H2
None None...
CVE-2024-8316
In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...
CVE-2024-7575
In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...
July 9, 2024—KB5040438 (OS Build 25398.1009)
None None...
July 9, 2024—KB5040437 (OS Build 20348.2582)
None None...
Malicious code in WpfAnimatedGif.Net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Wpf.UI.WinForms (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in WPF-UI-Net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Remote Code Execution (RCE)
Overview Affected versions of this package are vulnerable to Remote Code Execution RCE. A vulnerability exists in how WPF applications load and render XPS documents which may result in remote code execution. Remediation Upgrade Microsoft.WindowsDesktop.App.Runtime.win-x64 to version 6.0.18, 7.0.7...
SUSE CVE-2014-9835
Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file...
June 14, 2022-KB5013887 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 20H2, Windows Server, version 20H2, Windows 10 Version 21H1, and Windows 10 Version 21H2
None None...
February 8, 2022-KB5009470 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2
None None...
January 11, 2022-KB5008876 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 20H2, Windows Server, version 20H2, Windows 10 Version 21H1, and Windows 10 Version 21H2
None None...
September 8, 2020-KB4576480 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1703
None None...