Vulnerabilities
Microsoft patches high-severity .NET Framework out-of-bounds write flaw CVE-2026-70007
Microsoft has released updates for .NET Framework versions 8 through 11 to address a high-severity remote code execution vulnerability in WPF.
WPF
Everything Threat Times has reported about WPF: 4 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Microsoft .NET WPF Vulnerability CVE-2026-96224 Allows Remote Code Execution via Pixel Shaders
Microsoft patches a high-severity out-of-bounds write flaw in .NET WPF that enables remote code execution through crafted pixel-shader bytecode.
Vulnerabilities
Microsoft Issues Patch for High-Severity .NET Remote Code Execution Flaw
A deserialization flaw in .NET Windows Desktop Runtime allows remote code execution after user interaction, with patches now available for versions 8 through 11.
Vulnerabilities
Microsoft patches high-severity .NET elevation of privilege flaw in Windows Desktop Runtime
An integer overflow in WPF allows remote attackers to elevate privileges, prompting Microsoft to release patched versions for .NET 8 through 11.