Out-of-Bounds Write in.NET: Assess Your Exposure Now
EARLY WARNING · UNCONFIRMED. This page describes a developing threat that 0Day surfaced from early signals and has not yet independently confirmed. Details may change. Always verify against the primary sources before acting.
- Severity
- HIGH
- CVSS
- 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
- Affected component
- Microsoft.WindowsDesktop.App.Runtime.win-arm64 (nuget)
- Affected versions
- >= 10.0.0, < 10.0.10 or >= 10.0.0, <= 10.0.0 or >= 10.0.1, <= 10.0.1 or >= 10.0.2, <= 10.0.2 or >= 10.0.3, <= 10.0.3 or >= 10.0.4, <= 10.0.4 or >= 10.0.5, <= 10.0.5 or >= 10.0.6, <= 10.0.6 or >= 10.0.7, <= 10.0.7 or >= 10.0.8, <= 10.0.8 or >= 10.0.9, <= 10.0.9 or >= 9.0.0, < 9.0.18 or >= 9.0.0, <= 9.0.0 or >= 9.0.1, <= 9.0.1 or >= 9.0.10, <= 9.0.10 or >= 9.0.11, <= 9.0.11 or >= 9.0.12, <= 9.0.12 or >= 9.0.13, <= 9.0.13 or >= 9.0.14, <= 9.0.14 or >= 9.0.15, <= 9.0.15 or >= 9.0.16, <= 9.0.16 or >= 9.0.17, <= 9.0.17 or >= 9.0.2, <= 9.0.2 or >= 9.0.3, <= 9.0.3 or >= 9.0.4, <= 9.0.4 or >= 9.0.5, <= 9.0.5 or >= 9.0.6, <= 9.0.6 or >= 9.0.7, <= 9.0.7 or >= 9.0.8, <= 9.0.8 or >= 9.0.9, <= 9.0.9 or >= 8.0.0, < 8.0.29 or >= 8.0.0, <= 8.0.0 or >= 8.0.1, <= 8.0.1 or >= 8.0.10, <= 8.0.10 or >= 8.0.11, <= 8.0.11 or >= 8.0.12, <= 8.0.12 or >= 8.0.13, <= 8.0.13 or >= 8.0.14, <= 8.0.14 or >= 8.0.15, <= 8.0.15 or >= 8.0.16, <= 8.0.16 or >= 8.0.17, <= 8.0.17 or >= 8.0.18, <= 8.0.18 or >= 8.0.19, <= 8.0.19 or >= 8.0.2, <= 8.0.2 or >= 8.0.20, <= 8.0.20 or >= 8.0.21, <= 8.0.21 or >= 8.0.22, <= 8.0.22 or >= 8.0.23, <= 8.0.23 or >= 8.0.24, <= 8.0.24 or >= 8.0.25, <= 8.0.25 or >= 8.0.26, <= 8.0.26 or >= 8.0.27, <= 8.0.27 or >= 8.0.28, <= 8.0.28 or >= 8.0.3, <= 8.0.3 or >= 8.0.4, <= 8.0.4 or >= 8.0.5, <= 8.0.5 or >= 8.0.6, <= 8.0.6 or >= 8.0.7, <= 8.0.7 or >= 8.0.8, <= 8.0.8 or >= 6.0.0, < 6.0.12 or >= 6.0.0, <= 6.0.0 or >= 6.0.1, <= 6.0.1 or >= 6.0.10, <= 6.0.10 or >= 6.0.11, <= 6.0.11 or >= 6.0.2, <= 6.0.2 or >= 6.0.3, <= 6.0.3 or >= 6.0.4, <= 6.0.4 or >= 6.0.5, <= 6.0.5 or >= 6.0.6, <= 6.0.6 or >= 6.0.7, <= 6.0.7 or >= 6.0.8, <= 6.0.8 or >= 6.0.9, <= 6.0.9 or >= 7.0.0, < 7.0.1 or >= 7.0.0, <= 7.0.0 or >= 7.0.0, < 7.0.9 or >= 7.0.0, <= 7.0.0 or >= 7.0.1, <= 7.0.1 or >= 7.0.2, <= 7.0.2 or >= 7.0.3, <= 7.0.3 or >= 7.0.4, <= 7.0.4 or >= 7.0.5, <= 7.0.5 or >= 7.0.7, <= 7.0.7 or >= 7.0.8, <= 7.0.8 or >= 6.0.0, < 6.0.20 or >= 6.0.0, <= 6.0.0 or >= 6.0.1, <= 6.0.1 or >= 6.0.10, <= 6.0.10 or >= 6.0.11, <= 6.0.11 or >= 6.0.12, <= 6.0.12 or >= 6.0.13, <= 6.0.13 or >= 6.0.14, <= 6.0.14 or >= 6.0.15, <= 6.0.15 or >= 6.0.16, <= 6.0.16 or >= 6.0.18, <= 6.0.18 or >= 6.0.19, <= 6.0.19 or >= 6.0.2, <= 6.0.2 or >= 6.0.3, <= 6.0.3 or >= 6.0.4, <= 6.0.4 or >= 6.0.5, <= 6.0.5 or >= 6.0.6, <= 6.0.6 or >= 6.0.7, <= 6.0.7 or >= 6.0.8, <= 6.0.8 or >= 6.0.9, <= 6.0.9 or < 6.0.29 or >= 5.0.0, <= 5.0.0 or >= 5.0.1, <= 5.0.1 or >= 5.0.10, <= 5.0.10 or >= 5.0.11, <= 5.0.11 or >= 5.0.12, <= 5.0.12 or >= 5.0.13, <= 5.0.13 or >= 5.0.14, <= 5.0.14 or >= 5.0.15, <= 5.0.15 or >= 5.0.16, <= 5.0.16 or >= 5.0.17, <= 5.0.17 or >= 5.0.2, <= 5.0.2 or >= 5.0.3, <= 5.0.3 or >= 5.0.4, <= 5.0.4 or >= 5.0.5, <= 5.0.5 or >= 5.0.6, <= 5.0.6 or >= 5.0.7, <= 5.0.7 or >= 5.0.8, <= 5.0.8 or >= 5.0.9, <= 5.0.9 or >= 6.0.0, <= 6.0.0 or >= 6.0.1, <= 6.0.1 or >= 6.0.10, <= 6.0.10 or >= 6.0.11, <= 6.0.11 or >= 6.0.12, <= 6.0.12 or >= 6.0.13, <= 6.0.13 or >= 6.0.14, <= 6.0.14 or >= 6.0.15, <= 6.0.15 or >= 6.0.16, <= 6.0.16 or >= 6.0.18, <= 6.0.18 or >= 6.0.19, <= 6.0.19 or >= 6.0.2, <= 6.0.2 or >= 6.0.20, <= 6.0.20 or >= 6.0.21, <= 6.0.21 or >= 6.0.22, <= 6.0.22 or >= 6.0.23, <= 6.0.23 or >= 6.0.24, <= 6.0.24 or >= 6.0.25, <= 6.0.25 or >= 6.0.26, <= 6.0.26 or >= 6.0.27, <= 6.0.27 or >= 6.0.28, <= 6.0.28 or >= 6.0.3, <= 6.0.3 or >= 6.0.4, <= 6.0.4 or >= 6.0.5, <= 6.0.5 or >= 6.0.6, <= 6.0.6 or >= 6.0.7, <= 6.0.7 or >= 6.0.8, <= 6.0.8 or >= 6.0.9, <= 6.0.9 or >= 8.0.0, < 8.0.4 or >= 8.0.0, <= 8.0.0 or >= 8.0.1, <= 8.0.1 or >= 8.0.2, <= 8.0.2 or >= 8.0.3, <= 8.0.3 or >= 7.0.0, < 7.0.18 or >= 7.0.0, <= 7.0.0 or >= 7.0.1, <= 7.0.1 or >= 7.0.10, <= 7.0.10 or >= 7.0.11, <= 7.0.11 or >= 7.0.12, <= 7.0.12 or >= 7.0.13, <= 7.0.13 or >= 7.0.14, <= 7.0.14 or >= 7.0.15, <= 7.0.15 or >= 7.0.16, <= 7.0.16 or >= 7.0.17, <= 7.0.17 or >= 7.0.2, <= 7.0.2 or >= 7.0.3, <= 7.0.3 or >= 7.0.4, <= 7.0.4 or >= 7.0.5, <= 7.0.5 or >= 7.0.7, <= 7.0.7 or >= 7.0.8, <= 7.0.8 or >= 7.0.9, <= 7.0.9 or >= 8.0.0, < 8.0.27 or >= 8.0.0, <= 8.0.0 or >= 8.0.1, <= 8.0.1 or >= 8.0.10, <= 8.0.10 or >= 8.0.11, <= 8.0.11 or >= 8.0.12, <= 8.0.12 or >= 8.0.13, <= 8.0.13 or >= 8.0.14, <= 8.0.14 or >= 8.0.15, <= 8.0.15 or >= 8.0.16, <= 8.0.16 or >= 8.0.17, <= 8.0.17 or >= 8.0.18, <= 8.0.18 or >= 8.0.19, <= 8.0.19 or >= 8.0.2, <= 8.0.2 or >= 8.0.20, <= 8.0.20 or >= 8.0.21, <= 8.0.21 or >= 8.0.22, <= 8.0.22 or >= 8.0.23, <= 8.0.23 or >= 8.0.24, <= 8.0.24 or >= 8.0.25, <= 8.0.25 or >= 8.0.26, <= 8.0.26 or >= 8.0.3, <= 8.0.3 or >= 8.0.4, <= 8.0.4 or >= 8.0.5, <= 8.0.5 or >= 8.0.6, <= 8.0.6 or >= 8.0.7, <= 8.0.7 or >= 8.0.8, <= 8.0.8 or >= 9.0.0, < 9.0.16 or >= 9.0.0, <= 9.0.0 or >= 9.0.1, <= 9.0.1 or >= 9.0.10, <= 9.0.10 or >= 9.0.11, <= 9.0.11 or >= 9.0.12, <= 9.0.12 or >= 9.0.13, <= 9.0.13 or >= 9.0.14, <= 9.0.14 or >= 9.0.15, <= 9.0.15 or >= 9.0.2, <= 9.0.2 or >= 9.0.3, <= 9.0.3 or >= 9.0.4, <= 9.0.4 or >= 9.0.5, <= 9.0.5 or >= 9.0.6, <= 9.0.6 or >= 9.0.7, <= 9.0.7 or >= 9.0.8, <= 9.0.8 or >= 9.0.9, <= 9.0.9 or >= 10.0.0, < 10.0.8 or >= 10.0.0, <= 10.0.0 or >= 10.0.1, <= 10.0.1 or >= 10.0.2, <= 10.0.2 or >= 10.0.3, <= 10.0.3 or >= 10.0.4, <= 10.0.4 or >= 10.0.5, <= 10.0.5 or >= 10.0.6, <= 10.0.6 or >= 10.0.7, <= 10.0.7 or >= 10.0.0, < 10.0.11 or >= 10.0.0, <= 10.0.0 or >= 10.0.1, <= 10.0.1 or >= 10.0.10, <= 10.0.10 or >= 10.0.2, <= 10.0.2 or >= 10.0.3, <= 10.0.3 or >= 10.0.4, <= 10.0.4 or >= 10.0.5, <= 10.0.5 or >= 10.0.6, <= 10.0.6 or >= 10.0.7, <= 10.0.7 or >= 10.0.8, <= 10.0.8 or >= 10.0.9, <= 10.0.9 or >= 9.0.0, < 9.0.19 or >= 9.0.0, <= 9.0.0 or >= 9.0.1, <= 9.0.1 or >= 9.0.10, <= 9.0.10 or >= 9.0.11, <= 9.0.11 or >= 9.0.12, <= 9.0.12 or >= 9.0.13, <= 9.0.13 or >= 9.0.14, <= 9.0.14 or >= 9.0.15, <= 9.0.15 or >= 9.0.16, <= 9.0.16 or >= 9.0.17, <= 9.0.17 or >= 9.0.18, <= 9.0.18 or >= 9.0.2, <= 9.0.2 or >= 9.0.3, <= 9.0.3 or >= 9.0.4, <= 9.0.4 or >= 9.0.5, <= 9.0.5 or >= 9.0.6, <= 9.0.6 or >= 9.0.7, <= 9.0.7 or >= 9.0.8, <= 9.0.8 or >= 9.0.9, <= 9.0.9 or >= 8.0.0, < 8.0.30 or >= 8.0.0, <= 8.0.0 or >= 8.0.1, <= 8.0.1 or >= 8.0.10, <= 8.0.10 or >= 8.0.11, <= 8.0.11 or >= 8.0.12, <= 8.0.12 or >= 8.0.13, <= 8.0.13 or >= 8.0.14, <= 8.0.14 or >= 8.0.15, <= 8.0.15 or >= 8.0.16, <= 8.0.16 or >= 8.0.17, <= 8.0.17 or >= 8.0.18, <= 8.0.18 or >= 8.0.19, <= 8.0.19 or >= 8.0.2, <= 8.0.2 or >= 8.0.20, <= 8.0.20 or >= 8.0.21, <= 8.0.21 or >= 8.0.22, <= 8.0.22 or >= 8.0.23, <= 8.0.23 or >= 8.0.24, <= 8.0.24 or >= 8.0.25, <= 8.0.25 or >= 8.0.26, <= 8.0.26 or >= 8.0.27, <= 8.0.27 or >= 8.0.28, <= 8.0.28 or >= 8.0.29, <= 8.0.29 or >= 8.0.3, <= 8.0.3 or >= 8.0.4, <= 8.0.4 or >= 8.0.5, <= 8.0.5 or >= 8.0.6, <= 8.0.6 or >= 8.0.7, <= 8.0.7 or >= 8.0.8, <= 8.0.8 or >= 10.0.0, < 10.0.11 or >= 10.0.0, <= 10.0.0 or >= 10.0.1, <= 10.0.1 or >= 10.0.10, <= 10.0.10 or >= 10.0.2, <= 10.0.2 or >= 10.0.3, <= 10.0.3 or >= 10.0.4, <= 10.0.4 or >= 10.0.5, <= 10.0.5 or >= 10.0.6, <= 10.0.6 or >= 10.0.7, <= 10.0.7 or >= 10.0.8, <= 10.0.8 or >= 10.0.9, <= 10.0.9 or >= 9.0.0, < 9.0.19 or >= 9.0.0, <= 9.0.0 or >= 9.0.1, <= 9.0.1 or >= 9.0.10, <= 9.0.10 or >= 9.0.11, <= 9.0.11 or >= 9.0.12, <= 9.0.12 or >= 9.0.13, <= 9.0.13 or >= 9.0.14, <= 9.0.14 or >= 9.0.15, <= 9.0.15 or >= 9.0.16, <= 9.0.16 or >= 9.0.17, <= 9.0.17 or >= 9.0.18, <= 9.0.18 or >= 9.0.2, <= 9.0.2 or >= 9.0.3, <= 9.0.3 or >= 9.0.4, <= 9.0.4 or >= 9.0.5, <= 9.0.5 or >= 9.0.6, <= 9.0.6 or >= 9.0.7, <= 9.0.7 or >= 9.0.8, <= 9.0.8 or >= 9.0.9, <= 9.0.9 or >= 8.0.0, < 8.0.30 or >= 8.0.0, <= 8.0.0 or >= 8.0.1, <= 8.0.1 or >= 8.0.10, <= 8.0.10 or >= 8.0.11, <= 8.0.11 or >= 8.0.12, <= 8.0.12 or >= 8.0.13, <= 8.0.13 or >= 8.0.14, <= 8.0.14 or >= 8.0.15, <= 8.0.15 or >= 8.0.16, <= 8.0.16 or >= 8.0.17, <= 8.0.17 or >= 8.0.18, <= 8.0.18 or >= 8.0.19, <= 8.0.19 or >= 8.0.2, <= 8.0.2 or >= 8.0.20, <= 8.0.20 or >= 8.0.21, <= 8.0.21 or >= 8.0.22, <= 8.0.22 or >= 8.0.23, <= 8.0.23 or >= 8.0.24, <= 8.0.24 or >= 8.0.25, <= 8.0.25 or >= 8.0.26, <= 8.0.26 or >= 8.0.27, <= 8.0.27 or >= 8.0.28, <= 8.0.28 or >= 8.0.29, <= 8.0.29 or >= 8.0.3, <= 8.0.3 or >= 8.0.4, <= 8.0.4 or >= 8.0.5, <= 8.0.5 or >= 8.0.6, <= 8.0.6 or >= 8.0.7, <= 8.0.7 or >= 8.0.8, <= 8.0.8 or >= 10.0.0, < 10.0.11 or >= 10.0.0, <= 10.0.0 or >= 10.0.1, <= 10.0.1 or >= 10.0.10, <= 10.0.10 or >= 10.0.2, <= 10.0.2 or >= 10.0.3, <= 10.0.3 or >= 10.0.4, <= 10.0.4 or >= 10.0.5, <= 10.0.5 or >= 10.0.6, <= 10.0.6 or >= 10.0.7, <= 10.0.7 or >= 10.0.8, <= 10.0.8 or >= 10.0.9, <= 10.0.9 or >= 9.0.0, < 9.0.19 or >= 9.0.0, <= 9.0.0 or >= 9.0.1, <= 9.0.1 or >= 9.0.10, <= 9.0.10 or >= 9.0.11, <= 9.0.11 or >= 9.0.12, <= 9.0.12 or >= 9.0.13, <= 9.0.13 or >= 9.0.14, <= 9.0.14 or >= 9.0.15, <= 9.0.15 or >= 9.0.16, <= 9.0.16 or >= 9.0.17, <= 9.0.17 or >= 9.0.18, <= 9.0.18 or >= 9.0.2, <= 9.0.2 or >= 9.0.3, <= 9.0.3 or >= 9.0.4, <= 9.0.4 or >= 9.0.5, <= 9.0.5 or >= 9.0.6, <= 9.0.6 or >= 9.0.7, <= 9.0.7 or >= 9.0.8, <= 9.0.8 or >= 9.0.9, <= 9.0.9 or >= 8.0.0, < 8.0.30 or >= 8.0.0, <= 8.0.0 or >= 8.0.1, <= 8.0.1 or >= 8.0.10, <= 8.0.10 or >= 8.0.11, <= 8.0.11 or >= 8.0.12, <= 8.0.12 or >= 8.0.13, <= 8.0.13 or >= 8.0.14, <= 8.0.14 or >= 8.0.15, <= 8.0.15 or >= 8.0.16, <= 8.0.16 or >= 8.0.17, <= 8.0.17 or >= 8.0.18, <= 8.0.18 or >= 8.0.19, <= 8.0.19 or >= 8.0.2, <= 8.0.2 or >= 8.0.20, <= 8.0.20 or >= 8.0.21, <= 8.0.21 or >= 8.0.22, <= 8.0.22 or >= 8.0.23, <= 8.0.23 or >= 8.0.24, <= 8.0.24 or >= 8.0.25, <= 8.0.25 or >= 8.0.26, <= 8.0.26 or >= 8.0.27, <= 8.0.27 or >= 8.0.28, <= 8.0.28 or >= 8.0.29, <= 8.0.29 or >= 8.0.3, <= 8.0.3 or >= 8.0.4, <= 8.0.4 or >= 8.0.5, <= 8.0.5 or >= 8.0.6, <= 8.0.6 or >= 8.0.7, <= 8.0.7 or >= 8.0.8, <= 8.0.8 or >= 7.0.0, < 7.0.7 or >= 7.0.0, <= 7.0.0 or >= 7.0.1, <= 7.0.1 or >= 7.0.2, <= 7.0.2 or >= 7.0.3, <= 7.0.3 or >= 7.0.4, <= 7.0.4 or >= 7.0.5, <= 7.0.5 or >= 6.0.0, < 6.0.18 or >= 6.0.0, <= 6.0.0 or >= 6.0.1, <= 6.0.1 or >= 6.0.10, <= 6.0.10 or >= 6.0.11, <= 6.0.11 or >= 6.0.12, <= 6.0.12 or >= 6.0.13, <= 6.0.13 or >= 6.0.14, <= 6.0.14 or >= 6.0.15, <= 6.0.15 or >= 6.0.16, <= 6.0.16 or >= 6.0.2, <= 6.0.2 or >= 6.0.3, <= 6.0.3 or >= 6.0.4, <= 6.0.4 or >= 6.0.5, <= 6.0.5 or >= 6.0.6, <= 6.0.6 or >= 6.0.7, <= 6.0.7 or >= 6.0.8, <= 6.0.8 or >= 6.0.9, <= 6.0.9 or >= 10.0.0, < 10.0.11 or >= 10.0.0, <= 10.0.0 or >= 10.0.1, <= 10.0.1 or >= 10.0.10, <= 10.0.10 or >= 10.0.2, <= 10.0.2 or >= 10.0.3, <= 10.0.3 or >= 10.0.4, <= 10.0.4 or >= 10.0.5, <= 10.0.5 or >= 10.0.6, <= 10.0.6 or >= 10.0.7, <= 10.0.7 or >= 10.0.8, <= 10.0.8 or >= 10.0.9, <= 10.0.9 or >= 9.0.0, < 9.0.19 or >= 9.0.0, <= 9.0.0 or >= 9.0.1, <= 9.0.1 or >= 9.0.10, <= 9.0.10 or >= 9.0.11, <= 9.0.11 or >= 9.0.12, <= 9.0.12 or >= 9.0.13, <= 9.0.13 or >= 9.0.14, <= 9.0.14 or >= 9.0.15, <= 9.0.15 or >= 9.0.16, <= 9.0.16 or >= 9.0.17, <= 9.0.17 or >= 9.0.18, <= 9.0.18 or >= 9.0.2, <= 9.0.2 or >= 9.0.3, <= 9.0.3 or >= 9.0.4, <= 9.0.4 or >= 9.0.5, <= 9.0.5 or >= 9.0.6, <= 9.0.6 or >= 9.0.7, <= 9.0.7 or >= 9.0.8, <= 9.0.8 or >= 9.0.9, <= 9.0.9 or >= 8.0.0, < 8.0.30 or >= 8.0.0, <= 8.0.0 or >= 8.0.1, <= 8.0.1 or >= 8.0.10, <= 8.0.10 or >= 8.0.11, <= 8.0.11 or >= 8.0.12, <= 8.0.12 or >= 8.0.13, <= 8.0.13 or >= 8.0.14, <= 8.0.14 or >= 8.0.15, <= 8.0.15 or >= 8.0.16, <= 8.0.16 or >= 8.0.17, <= 8.0.17 or >= 8.0.18, <= 8.0.18 or >= 8.0.19, <= 8.0.19 or >= 8.0.2, <= 8.0.2 or >= 8.0.20, <= 8.0.20 or >= 8.0.21, <= 8.0.21 or >= 8.0.22, <= 8.0.22 or >= 8.0.23, <= 8.0.23 or >= 8.0.24, <= 8.0.24 or >= 8.0.25, <= 8.0.25 or >= 8.0.26, <= 8.0.26 or >= 8.0.27, <= 8.0.27 or >= 8.0.28, <= 8.0.28 or >= 8.0.29, <= 8.0.29 or >= 8.0.3, <= 8.0.3 or >= 8.0.4, <= 8.0.4 or >= 8.0.5, <= 8.0.5 or >= 8.0.6, <= 8.0.6 or >= 8.0.7, <= 8.0.7 or >= 8.0.8, <= 8.0.8 or >= 10.0.0, < 10.0.11 or >= 10.0.0, <= 10.0.0 or >= 10.0.1, <= 10.0.1 or >= 10.0.10, <= 10.0.10 or >= 10.0.2, <= 10.0.2 or >= 10.0.3, <= 10.0.3 or >= 10.0.4, <= 10.0.4 or >= 10.0.5, <= 10.0.5 or >= 10.0.6, <= 10.0.6 or >= 10.0.7, <= 10.0.7 or >= 10.0.8, <= 10.0.8 or >= 10.0.9, <= 10.0.9 or >= 9.0.0, < 9.0.19 or >= 9.0.0, <= 9.0.0 or >= 9.0.1, <= 9.0.1 or >= 9.0.10, <= 9.0.10 or >= 9.0.11, <= 9.0.11 or >= 9.0.12, <= 9.0.12 or >= 9.0.13, <= 9.0.13 or >= 9.0.14, <= 9.0.14 or >= 9.0.15, <= 9.0.15 or >= 9.0.16, <= 9.0.16 or >= 9.0.17, <= 9.0.17 or >= 9.0.18, <= 9.0.18 or >= 9.0.2, <= 9.0.2 or >= 9.0.3, <= 9.0.3 or >= 9.0.4, <= 9.0.4 or >= 9.0.5, <= 9.0.5 or >= 9.0.6, <= 9.0.6 or >= 9.0.7, <= 9.0.7 or >= 9.0.8, <= 9.0.8 or >= 9.0.9, <= 9.0.9 or >= 8.0.0, < 8.0.30 or >= 8.0.0, <= 8.0.0 or >= 8.0.1, <= 8.0.1 or >= 8.0.10, <= 8.0.10 or >= 8.0.11, <= 8.0.11 or >= 8.0.12, <= 8.0.12 or >= 8.0.13, <= 8.0.13 or >= 8.0.14, <= 8.0.14 or >= 8.0.15, <= 8.0.15 or >= 8.0.16, <= 8.0.16 or >= 8.0.17, <= 8.0.17 or >= 8.0.18, <= 8.0.18 or >= 8.0.19, <= 8.0.19 or >= 8.0.2, <= 8.0.2 or >= 8.0.20, <= 8.0.20 or >= 8.0.21, <= 8.0.21 or >= 8.0.22, <= 8.0.22 or >= 8.0.23, <= 8.0.23 or >= 8.0.24, <= 8.0.24 or >= 8.0.25, <= 8.0.25 or >= 8.0.26, <= 8.0.26 or >= 8.0.27, <= 8.0.27 or >= 8.0.28, <= 8.0.28 or >= 8.0.29, <= 8.0.29 or >= 8.0.3, <= 8.0.3 or >= 8.0.4, <= 8.0.4 or >= 8.0.5, <= 8.0.5 or >= 8.0.6, <= 8.0.6 or >= 8.0.7, <= 8.0.7 or >= 8.0.8, <= 8.0.8
- Patched version
- 10.0.11
CVE-2026-70354GHSA-GG8C-3338-XW2F
An out-of-bounds write vulnerability in.NET has been reported, which could allow unauthorized attackers to execute code locally. Microsoft.NET projects using affected versions of the Microsoft.WindowsDesktop.App.Runtime package are potentially at risk.
What happened
An out-of-bounds write vulnerability has been identified in.NET, tracked as CVE-2026-70354 and GHSA-GG8C-3338-XW2F. This vulnerability could allow an unauthorized attacker to execute code locally on affected systems. The vulnerability affects Microsoft.NET projects using specific versions of the Microsoft.WindowsDesktop.App.Runtime package. The issue was first flagged on August 11, 2026. The severity of this vulnerability is high, with a CVSS score of 7.8. It has not yet been exploited in the wild.
To assess your exposure, check the versions of Microsoft.WindowsDesktop.App.Runtime.win-arm64, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-x86, and Microsoft.WindowsDesktop.App.Runtime.win-arm64 in your.NET projects. If any of these components are within the affected version ranges, your project may be vulnerable.
What to do about it
- Upgrade to the patched versions: 10.0.11 for.NET 10 and 9.0.19 for.NET 9.
- Review the version ranges provided in the affected components section to ensure all dependencies are up to date.
- Monitor the primary sources for updates on the vulnerability and any additional patches that may be released.
How 0Day would have caught this
MATCHED TO YOUR ACTUAL DEPENDENCY GRAPH0Day matches every incoming threat signal against your GitHub organization’s full dependency graph, including transitive dependencies. If
Microsoft.WindowsDesktop.App.Runtime.win-arm64 is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.
Frequently asked questions
Am I affected?
You may be affected if your.NET projects use any of the affected versions of the Microsoft.WindowsDesktop.App.Runtime package as listed in the affected components section.
What should I do right now?
Upgrade to the patched versions: 10.0.11 for.NET 10 and 9.0.19 for.NET 9. Review your project dependencies to ensure they are up to date.
Is this vulnerability being actively exploited?
There is no evidence that this vulnerability has been exploited in the wild at this time.
Where can I find more information?
Refer to the primary sources provided, including the Microsoft Security Advisory on GitHub.