{"schema_version":1,"title":"Microsoft.WindowsDesktop.App.Runtime.win-x86 (NuGet) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 24 vulnerabilities in Microsoft.WindowsDesktop.App.Runtime.win-x86 (NuGet): 11 in the last 7 days and 16 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-70035, was published on 13 October 2026. 11 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/microsoft-windowsdesktop-app-runtime-win-x86","json_url":"https://junglewise.ai/threats/technologies/microsoft-windowsdesktop-app-runtime-win-x86.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/microsoft-windowsdesktop-app-runtime-win-x86","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":16,"all_time":24,"critical":0,"exploited":0,"last_7_days":11,"last_30_days":11,"last_90_days":16,"last_365_days":19},"latest":[{"cve":"CVE-2026-70035","cvss":8.8,"epss":0.0127,"slug":"cve-2026-70035-microsoft-security-advisory-net-and-visual-studio-remote-code","title":".NET WindowsDesktop.App.Runtime deserialization remote code execution","severity":"high","exploited":false,"published_at":"2026-10-13T20:53:46+00:00","url":"https://junglewise.ai/threats/cve-2026-70035-microsoft-security-advisory-net-and-visual-studio-remote-code"},{"cve":"CVE-2026-70007","cvss":8.8,"epss":0.0064,"slug":"cve-2026-70007-microsoft-security-advisory-net-and-visual-studio-remote-code","title":"Microsoft .NET and Visual Studio WPF heap out-of-bounds write","severity":"high","exploited":false,"published_at":"2026-10-13T20:52:52+00:00","url":"https://junglewise.ai/threats/cve-2026-70007-microsoft-security-advisory-net-and-visual-studio-remote-code"},{"cve":"CVE-2026-87697","cvss":8.8,"epss":0.0084,"slug":"cve-2026-87697-microsoft-security-advisory-net-and-visual-studio-remote-code","title":".NET WPF XPS synthetic hyperlinks remote code execution","severity":"high","exploited":false,"published_at":"2026-10-13T20:52:24+00:00","url":"https://junglewise.ai/threats/cve-2026-87697-microsoft-security-advisory-net-and-visual-studio-remote-code"},{"cve":"CVE-2026-96224","cvss":8.8,"epss":0.0074,"slug":"cve-2026-96224-microsoft-security-advisory-net-and-visual-studio-remote-code","title":"Microsoft .NET WindowsDesktop.App.Runtime heap buffer overflow in WPF shader parsing","severity":"high","exploited":false,"published_at":"2026-10-13T20:50:11+00:00","url":"https://junglewise.ai/threats/cve-2026-96224-microsoft-security-advisory-net-and-visual-studio-remote-code"},{"cve":"CVE-2026-85363","cvss":8.8,"epss":0.0074,"slug":"cve-2026-85363-microsoft-security-advisory-net-and-visual-studio-remote-code","title":"Microsoft .NET Windows Desktop App Runtime integer overflow in glyph processing","severity":"high","exploited":false,"published_at":"2026-10-13T20:49:39+00:00","url":"https://junglewise.ai/threats/cve-2026-85363-microsoft-security-advisory-net-and-visual-studio-remote-code"},{"cve":"CVE-2026-83520","cvss":8.8,"epss":0.0127,"slug":"cve-2026-83520-microsoft-security-advisory-net-and-visual-studio-remote-code","title":".NET WindowsDesktop.App.Runtime XAML deserialization RCE","severity":"high","exploited":false,"published_at":"2026-10-13T20:48:38+00:00","url":"https://junglewise.ai/threats/cve-2026-83520-microsoft-security-advisory-net-and-visual-studio-remote-code"},{"cve":"CVE-2026-70174","cvss":8.8,"epss":0.0081,"slug":"cve-2026-70174-microsoft-security-advisory-net-and-visual-studio-remote-code","title":"Microsoft .NET WPF XPS hyperlink navigation remote code execution","severity":"high","exploited":false,"published_at":"2026-10-13T20:48:07+00:00","url":"https://junglewise.ai/threats/cve-2026-70174-microsoft-security-advisory-net-and-visual-studio-remote-code"},{"cve":"CVE-2026-96232","cvss":7.5,"epss":0.0069,"slug":"cve-2026-96232-microsoft-security-advisory-net-and-visual-studio-information","title":"Microsoft .NET WindowsDesktop App Runtime information disclosure","severity":"high","exploited":false,"published_at":"2026-10-13T20:47:31+00:00","url":"https://junglewise.ai/threats/cve-2026-96232-microsoft-security-advisory-net-and-visual-studio-information"},{"cve":"CVE-2026-96234","cvss":5.3,"epss":0.0028,"slug":"cve-2026-96234-microsoft-security-advisory-net-and-visual-studio-information","title":"Microsoft .NET WPF origin validation error in URI handling","severity":"medium","exploited":false,"published_at":"2026-10-13T20:46:53+00:00","url":"https://junglewise.ai/threats/cve-2026-96234-microsoft-security-advisory-net-and-visual-studio-information"},{"cve":"CVE-2026-96229","cvss":6.5,"epss":0.0082,"slug":"cve-2026-96229-microsoft-security-advisory-net-and-visual-studio-information","title":"Microsoft .NET WindowsDesktop.App.Runtime information disclosure in XAML","severity":"medium","exploited":false,"published_at":"2026-10-13T20:46:25+00:00","url":"https://junglewise.ai/threats/cve-2026-96229-microsoft-security-advisory-net-and-visual-studio-information"},{"cve":"CVE-2026-96235","cvss":8.8,"epss":0.0074,"slug":"cve-2026-96235-microsoft-security-advisory-net-and-visual-studio-remote-code","title":"Microsoft .NET WPF heap out-of-bounds access in pixel-shader parsing","severity":"high","exploited":false,"published_at":"2026-10-13T20:45:50+00:00","url":"https://junglewise.ai/threats/cve-2026-96235-microsoft-security-advisory-net-and-visual-studio-remote-code"},{"cve":"CVE-2026-62871","cvss":7.8,"epss":0.0047,"slug":"cve-2026-62871-microsoft-net-wpf-heap-overflow-and-elevation-of-privilege","title":"Microsoft .NET WPF heap overflow and elevation of privilege","severity":"high","exploited":false,"published_at":"2026-08-11T19:46:40+00:00","url":"https://junglewise.ai/threats/cve-2026-62871-microsoft-net-wpf-heap-overflow-and-elevation-of-privilege"},{"cve":"CVE-2026-62897","cvss":7,"epss":0.0037,"slug":"cve-2026-62897-microsoft-net-integer-overflow-in-windows-presentation-foundation","title":"Microsoft .NET integer overflow in Windows Presentation Foundation","severity":"high","exploited":false,"published_at":"2026-08-11T19:36:34+00:00","url":"https://junglewise.ai/threats/cve-2026-62897-microsoft-net-integer-overflow-in-windows-presentation-foundation"},{"cve":"CVE-2026-70354","cvss":7.8,"epss":0.0036,"slug":"cve-2026-70354-microsoft-net-out-of-bounds-write-in-windows-presentation","title":"Microsoft .NET out-of-bounds write in Windows Presentation Foundation","severity":"high","exploited":false,"published_at":"2026-08-11T19:24:47+00:00","url":"https://junglewise.ai/threats/cve-2026-70354-microsoft-net-out-of-bounds-write-in-windows-presentation"},{"cve":"CVE-2026-62886","cvss":7.8,"epss":0.0047,"slug":"cve-2026-62886-microsoft-net-wpf-elevation-of-privilege-via-integer-overflow","title":"Microsoft .NET WPF elevation of privilege via integer overflow","severity":"high","exploited":false,"published_at":"2026-08-11T18:58:08+00:00","url":"https://junglewise.ai/threats/cve-2026-62886-microsoft-net-wpf-elevation-of-privilege-via-integer-overflow"},{"cve":"CVE-2026-62902","cvss":6.5,"epss":0.0087,"slug":"cve-2026-62902-microsoft-net-wpf-information-disclosure-in-document-parsing","title":"Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.","severity":"medium","exploited":false,"published_at":"2026-08-11T17:18:44.503+00:00","url":"https://junglewise.ai/threats/cve-2026-62902-microsoft-net-wpf-information-disclosure-in-document-parsing"},{"cve":"CVE-2026-50650","cvss":7.8,"epss":0.0046,"slug":"cve-2026-50650-microsoft-net-framework-code-injection-privilege-escalation","title":"Microsoft .NET Framework code injection privilege escalation","severity":"high","exploited":false,"published_at":"2026-07-14T20:17:38.23+00:00","url":"https://junglewise.ai/threats/cve-2026-50650-microsoft-net-framework-code-injection-privilege-escalation"},{"cve":"CVE-2026-50646","cvss":7.8,"epss":0.0402,"slug":"cve-2026-50646-microsoft-net-framework-protection-mechanism-failure","title":"Microsoft .NET Framework protection mechanism failure","severity":"high","exploited":false,"published_at":"2026-07-14T20:17:37.67+00:00","url":"https://junglewise.ai/threats/cve-2026-50646-microsoft-net-framework-protection-mechanism-failure"},{"cve":"CVE-2026-35433","cvss":7.3,"epss":0.0057,"slug":"cve-2026-35433-microsoft-net-heap-overflow-elevation-of-privilege","title":"Microsoft .NET heap overflow elevation of privilege","severity":"high","exploited":false,"published_at":"2026-05-12T18:17:13.71+00:00","url":"https://junglewise.ai/threats/cve-2026-35433-microsoft-net-heap-overflow-elevation-of-privilege"},{"cve":"CVE-2024-21409","cvss":3.1,"epss":0.0251,"slug":"cve-2024-21409-net-elevation-of-privilege-vulnerability","title":".NET Elevation of Privilege Vulnerability","severity":"low","exploited":false,"published_at":"2024-04-17T18:21:57+00:00","url":"https://junglewise.ai/threats/cve-2024-21409-net-elevation-of-privilege-vulnerability"},{"cve":"CVE-2023-33127","cvss":3.1,"epss":0.0187,"slug":"cve-2023-33127-microsoft-security-advisory-net-remote-code-execution","title":"Microsoft Security Advisory : .NET Remote Code Execution Vulnerability","severity":"low","exploited":false,"published_at":"2023-07-11T22:45:28+00:00","url":"https://junglewise.ai/threats/cve-2023-33127-microsoft-security-advisory-net-remote-code-execution"},{"cve":"CVE-2023-24895","cvss":3.1,"epss":0.0106,"slug":"cve-2023-24895-net-remote-code-execution-vulnerability","title":".NET Remote Code Execution Vulnerability","severity":"low","exploited":false,"published_at":"2023-06-14T17:02:24+00:00","url":"https://junglewise.ai/threats/cve-2023-24895-net-remote-code-execution-vulnerability"},{"cve":"CVE-2022-41089","cvss":3.1,"epss":0.0116,"slug":"cve-2022-41089-net-remote-code-execution-vulnerability","title":".NET Remote Code Execution Vulnerability","severity":"low","exploited":false,"published_at":"2022-12-14T21:42:00+00:00","url":"https://junglewise.ai/threats/cve-2022-41089-net-remote-code-execution-vulnerability"},{"cve":"CVE-2020-0606","cvss":3.1,"epss":0.1719,"slug":"cve-2020-0606-remote-code-execution-in-microsoft-windowsdesktop-app-ref","title":"Remote code execution in Microsoft.WindowsDesktop.App.Ref","severity":"low","exploited":false,"published_at":"2022-05-24T17:06:16+00:00","url":"https://junglewise.ai/threats/cve-2020-0606-remote-code-execution-in-microsoft-windowsdesktop-app-ref"}],"weekly":[{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":11},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Microsoft.ChakraCore (NuGet)","slug":"microsoft-chakracore","vulnerabilities":247,"url":"https://junglewise.ai/threats/technologies/microsoft-chakracore"},{"name":"Magick.NET-Q16-AnyCPU (NuGet)","slug":"magick-net-q16-anycpu","vulnerabilities":165,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-anycpu"},{"name":"Magick.NET-Q16-HDRI-AnyCPU (NuGet)","slug":"magick-net-q16-hdri-anycpu","vulnerabilities":161,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-hdri-anycpu"},{"name":"Magick.NET-Q8-AnyCPU (NuGet)","slug":"magick-net-q8-anycpu","vulnerabilities":161,"url":"https://junglewise.ai/threats/technologies/magick-net-q8-anycpu"},{"name":"Magick.NET-Q16-HDRI-x86 (NuGet)","slug":"magick-net-q16-hdri-x86","vulnerabilities":159,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-hdri-x86"},{"name":"Magick.NET-Q16-x86 (NuGet)","slug":"magick-net-q16-x86","vulnerabilities":158,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-x86"},{"name":"Magick.NET-Q8-x86 (NuGet)","slug":"magick-net-q8-x86","vulnerabilities":158,"url":"https://junglewise.ai/threats/technologies/magick-net-q8-x86"},{"name":"Magick.NET-Q16-arm64 (NuGet)","slug":"magick-net-q16-arm64","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-arm64"},{"name":"Magick.NET-Q16-HDRI-OpenMP-arm64 (NuGet)","slug":"magick-net-q16-hdri-openmp-arm64","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-hdri-openmp-arm64"},{"name":"Magick.NET-Q16-HDRI-x64 (NuGet)","slug":"magick-net-q16-hdri-x64","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-hdri-x64"},{"name":"Magick.NET-Q16-OpenMP-arm64 (NuGet)","slug":"magick-net-q16-openmp-arm64","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-openmp-arm64"},{"name":"Magick.NET-Q16-OpenMP-x64 (NuGet)","slug":"magick-net-q16-openmp-x64","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-openmp-x64"}],"technology":{"hub":true,"name":"Microsoft.WindowsDesktop.App.Runtime.win-x86 (NuGet)","slug":"microsoft-windowsdesktop-app-runtime-win-x86","vendor":{"hub":true,"name":"NuGet","slug":"nuget","url":"https://junglewise.ai/threats/vendors/nuget"},"aliases":[],"homepage":"https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x86","repo_url":"https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x86","description":"A NuGet package containing the Windows Desktop runtime for the x86 architecture.","url":"https://junglewise.ai/threats/technologies/microsoft-windowsdesktop-app-runtime-win-x86"},"most_severe":[{"cve":"CVE-2026-70035","cvss":8.8,"epss":0.0127,"slug":"cve-2026-70035-microsoft-security-advisory-net-and-visual-studio-remote-code","title":".NET WindowsDesktop.App.Runtime deserialization remote code execution","severity":"high","exploited":false,"published_at":"2026-10-13T20:53:46+00:00","url":"https://junglewise.ai/threats/cve-2026-70035-microsoft-security-advisory-net-and-visual-studio-remote-code"},{"cve":"CVE-2026-83520","cvss":8.8,"epss":0.0127,"slug":"cve-2026-83520-microsoft-security-advisory-net-and-visual-studio-remote-code","title":".NET WindowsDesktop.App.Runtime XAML deserialization RCE","severity":"high","exploited":false,"published_at":"2026-10-13T20:48:38+00:00","url":"https://junglewise.ai/threats/cve-2026-83520-microsoft-security-advisory-net-and-visual-studio-remote-code"},{"cve":"CVE-2026-87697","cvss":8.8,"epss":0.0084,"slug":"cve-2026-87697-microsoft-security-advisory-net-and-visual-studio-remote-code","title":".NET WPF XPS synthetic hyperlinks remote code execution","severity":"high","exploited":false,"published_at":"2026-10-13T20:52:24+00:00","url":"https://junglewise.ai/threats/cve-2026-87697-microsoft-security-advisory-net-and-visual-studio-remote-code"},{"cve":"CVE-2026-70174","cvss":8.8,"epss":0.0081,"slug":"cve-2026-70174-microsoft-security-advisory-net-and-visual-studio-remote-code","title":"Microsoft .NET WPF XPS hyperlink navigation remote code execution","severity":"high","exploited":false,"published_at":"2026-10-13T20:48:07+00:00","url":"https://junglewise.ai/threats/cve-2026-70174-microsoft-security-advisory-net-and-visual-studio-remote-code"},{"cve":"CVE-2026-96224","cvss":8.8,"epss":0.0074,"slug":"cve-2026-96224-microsoft-security-advisory-net-and-visual-studio-remote-code","title":"Microsoft .NET WindowsDesktop.App.Runtime heap buffer overflow in WPF shader parsing","severity":"high","exploited":false,"published_at":"2026-10-13T20:50:11+00:00","url":"https://junglewise.ai/threats/cve-2026-96224-microsoft-security-advisory-net-and-visual-studio-remote-code"},{"cve":"CVE-2026-85363","cvss":8.8,"epss":0.0074,"slug":"cve-2026-85363-microsoft-security-advisory-net-and-visual-studio-remote-code","title":"Microsoft .NET Windows Desktop App Runtime integer overflow in glyph processing","severity":"high","exploited":false,"published_at":"2026-10-13T20:49:39+00:00","url":"https://junglewise.ai/threats/cve-2026-85363-microsoft-security-advisory-net-and-visual-studio-remote-code"},{"cve":"CVE-2026-96235","cvss":8.8,"epss":0.0074,"slug":"cve-2026-96235-microsoft-security-advisory-net-and-visual-studio-remote-code","title":"Microsoft .NET WPF heap out-of-bounds access in pixel-shader parsing","severity":"high","exploited":false,"published_at":"2026-10-13T20:45:50+00:00","url":"https://junglewise.ai/threats/cve-2026-96235-microsoft-security-advisory-net-and-visual-studio-remote-code"},{"cve":"CVE-2026-70007","cvss":8.8,"epss":0.0064,"slug":"cve-2026-70007-microsoft-security-advisory-net-and-visual-studio-remote-code","title":"Microsoft .NET and Visual Studio WPF heap out-of-bounds write","severity":"high","exploited":false,"published_at":"2026-10-13T20:52:52+00:00","url":"https://junglewise.ai/threats/cve-2026-70007-microsoft-security-advisory-net-and-visual-studio-remote-code"},{"cve":"CVE-2026-50646","cvss":7.8,"epss":0.0402,"slug":"cve-2026-50646-microsoft-net-framework-protection-mechanism-failure","title":"Microsoft .NET Framework protection mechanism failure","severity":"high","exploited":false,"published_at":"2026-07-14T20:17:37.67+00:00","url":"https://junglewise.ai/threats/cve-2026-50646-microsoft-net-framework-protection-mechanism-failure"},{"cve":"CVE-2026-62871","cvss":7.8,"epss":0.0047,"slug":"cve-2026-62871-microsoft-net-wpf-heap-overflow-and-elevation-of-privilege","title":"Microsoft .NET WPF heap overflow and elevation of privilege","severity":"high","exploited":false,"published_at":"2026-08-11T19:46:40+00:00","url":"https://junglewise.ai/threats/cve-2026-62871-microsoft-net-wpf-heap-overflow-and-elevation-of-privilege"}],"generated_at":"2026-10-19T03:07:00.200186+00:00"}