CVE-2026-50649

A remote code execution vulnerability exists in Windows Presentation Foundation WPF in .NET 8, .NET 9, and .NET 10 when parsing specially crafted XAML input. An attacker who successfully exploits this vulnerability could execute arbitrary code in the context of the current user...