Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40923
HistoryJun 16, 2023 - 6:22 a.m.

Remote Code Execution (RCE)

2023-06-1606:22:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
26
remote code execution
wpf applications
xps documents
upload
execute
malicious code
system

0.001 Low

EPSS

Percentile

47.0%

Microsoft.WindowsDesktop.App.Runtime is vulnerable to Remote Code Execution (RCE). The vulnerability is due to how WPF applications load and render XPS documents which allows a local attacker to upload and execute malicious code on the system.