https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 18:59:57 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-85363 <p>Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.</p> <p>Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.</p> https://db.gcve.eu/vuln/fkie_cve-2026-85363 https://db.gcve.eu/vuln/ghsa-f63g-mx39-3r38 <p><strong>Affected:</strong> NuGet: Microsoft.WindowsDesktop.App.Runtime.win-arm64, NuGet: Microsoft.WindowsDesktop.App.Runtime.win-x64, NuGet: Microsoft.WindowsDesktop.App.Runtime.win-x86</p> <p>## Executive summary</p> <p>Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.</p> <p>Attacker-controlled XPS glyph coordinates can overflow destination pointer arithmetic in `CD3DGlyphBank::RectFillAlpha`, causing an out-of-bounds write and process termination.</p> <p>## Announcement</p> <p>Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/469</p> <p>## CVSS Details</p> <p>- **Version:** 3.1 - **Severity:** High - **Score:** 8.8 - **Vector:** `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`</p> <p>- **Weakness:** CWE-190 (Integer Overflow or Wraparound) ## Affected Platforms</p> <p>- **Platforms:** Windows - **Architectures:** All</p> <p>## &lt;a name=&#34;affected-packages&#34;&gt;&lt;/a&gt;Affected Packages</p> <p>The vulnerability affects Microsoft .NET projects that use an affected package version listed below.</p> <p>Package name | Affected version | Patched version ------------ | ---------------- | --------------- [Microsoft.WindowsDesktop.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-arm64) | &gt;= 8.0.0, &lt;= 8.0.31 | 8.0.32 [Microsoft.WindowsDesktop.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x64) | &gt;= 8.0.0, &lt;= 8.0.31 | 8.0.32 [Microsoft.WindowsDesktop.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.…</p> <p><strong>Affected:</strong> NuGet: Microsoft.WindowsDesktop.App.Runtime.win-arm64, NuGet: Microsoft.WindowsDesktop.App.Runtime.win-x64, NuGet: Microsoft.WindowsDesktop.App.Runtime.win-x86</p> <p>## Executive summary</p> <p>Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.</p> <p>Attacker-controlled XPS glyph coordinates can overflow destination pointer arithmetic in `CD3DGlyphBank::RectFillAlpha`, causing an out-of-bounds write and process termination.</p> <p>## Announcement</p> <p>Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/469</p> <p>## CVSS Details</p> <p>- **Version:** 3.1 - **Severity:** High - **Score:** 8.8 - **Vector:** `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`</p> <p>- **Weakness:** CWE-190 (Integer Overflow or Wraparound) ## Affected Platforms</p> <p>- **Platforms:** Windows - **Architectures:** All</p> <p>## &lt;a name=&#34;affected-packages&#34;&gt;&lt;/a&gt;Affected Packages</p> <p>The vulnerability affects Microsoft .NET projects that use an affected package version listed below.</p> <p>Package name | Affected version | Patched version ------------ | ---------------- | --------------- [Microsoft.WindowsDesktop.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-arm64) | &gt;= 8.0.0, &lt;= 8.0.31 | 8.0.32 [Microsoft.WindowsDesktop.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x64) | &gt;= 8.0.0, &lt;= 8.0.31 | 8.0.32 [Microsoft.WindowsDesktop.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.…</p> https://db.gcve.eu/vuln/ghsa-f63g-mx39-3r38 https://db.gcve.eu/vuln/ncsc-2026-0426 NCSC-2026-0426 https://db.gcve.eu/vuln/ncsc-2026-0426