GHSA-2969-4Q4W-W5H3 Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An elevation of privilege...

UBUNTU-CVE-2026-50646

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...

UBUNTU-CVE-2026-50649

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...

CVE-2026-50646

A remote code execution vulnerability exists in Windows Presentation Foundation WPF in .NET 8, .NET 9, and .NET 10 when parsing specially crafted XAML input. An attacker who successfully exploits this vulnerability could execute arbitrary code in the context of the current user...

CVE-2022-33315

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions...

CVE-2022-33316

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions...

EUVD-2019-18541

Malware in sbrugna...

EUVD-2019-9796

Malware in sbrugna...

EUVD-2013-3070

Malware in sbrugna...

EUVD-2013-3109

Malware in sbrugna...

EUVD-2022-36358

Malicious code in bioql PyPI...

CVE-2025-54111

Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally...

CVE-2025-54111

Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally...

CVE-2025-54913 Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability

...

CVE-2025-54111 Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability

...

Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability

Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally...

PT-2025-36878

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A flaw exists in the Windows UI XAML Maps MapControlSettings component due to improper synchronization during concurrent execution using a shared resource, leading to a race condition. This...

Exploit for CVE-2025-53693

CVE-2025-53693: HTML Cache Poisoning The XAML handler, loca...

MAL-2025-4576 Malicious code in react-native-xaml-repo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d64cdbdbf3b2ec9cf523f3b4b0b787c947b6c50c2d4d42bf96c13cd906d84c9f Any computer that has this package installed or running should be considered...

Malicious code in react-native-xaml-repo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d64cdbdbf3b2ec9cf523f3b4b0b787c947b6c50c2d4d42bf96c13cd906d84c9f Any computer that has this package installed or running should be considered...