Microsoft.WindowsDesktop.App.Runtime.win-x64 vulnerabilities
CVEs whose affected-version data names the Microsoft.WindowsDesktop.App.Runtime.win-x64 package (nuget). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
11 CVEsRSS
CVE-2026-96235High· 8.8Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-96234Medium· 5.3Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-96232High· 7.5Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-96229Medium· 6.5Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-96224High· 8.8Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-87697High· 8.8Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-85363High· 8.8Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-83520High· 8.8Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-70174High· 8.8Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-70035High· 8.8Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.
CVE-2026-70007High· 8.8Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.