Microsoft.WindowsDesktop.App.Runtime.win-x64 (NuGet)
Advisories
81
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 11.0.0-rc.2 or later clears every advisory below that has a fix.
Upgrade commands
dotnet
dotnet add package Microsoft.WindowsDesktop.App.Runtime.win-x64 --version 11.0.0-rc.2Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-g44w-h65v-4cw9 Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.86% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-g44w-h65v-4cw9 Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.86% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-g44w-h65v-4cw9 Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.86% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-g44w-h65v-4cw9 Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.86% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-fq6x-pvr9-888r Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure Vulnerability |
Medium EPSS 0.33% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-fq6x-pvr9-888r Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure Vulnerability |
Medium EPSS 0.33% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-fq6x-pvr9-888r Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure Vulnerability |
Medium EPSS 0.33% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-fq6x-pvr9-888r Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure Vulnerability |
Medium EPSS 0.33% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-f8qh-mqg4-9939 Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure Vulnerability |
High EPSS 0.90% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-f8qh-mqg4-9939 Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure Vulnerability |
High EPSS 0.90% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-f8qh-mqg4-9939 Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure Vulnerability |
High EPSS 0.90% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-f8qh-mqg4-9939 Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure Vulnerability |
High EPSS 0.90% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-5qr9-xxm9-6cmq Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure Vulnerability |
Medium EPSS 0.95% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-5qr9-xxm9-6cmq Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure Vulnerability |
Medium EPSS 0.95% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-5qr9-xxm9-6cmq Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure Vulnerability |
Medium EPSS 0.95% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-5qr9-xxm9-6cmq Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure Vulnerability |
Medium EPSS 0.95% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-xq57-crx4-g373 Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.76% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-xq57-crx4-g373 Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.76% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-xq57-crx4-g373 Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.76% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-xq57-crx4-g373 Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.76% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-c27m-942f-rcfh Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.84% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-c27m-942f-rcfh Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.84% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-c27m-942f-rcfh Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.84% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-c27m-942f-rcfh Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.84% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-f63g-mx39-3r38 Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.86% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-f63g-mx39-3r38 Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.86% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-f63g-mx39-3r38 Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.86% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-f63g-mx39-3r38 Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.86% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-4w5f-7jp2-w48g Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 1.44% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-4w5f-7jp2-w48g Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 1.44% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-4w5f-7jp2-w48g Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 1.44% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-4w5f-7jp2-w48g Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 1.44% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-f749-vhgx-39h6 Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.91% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-f749-vhgx-39h6 Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.91% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-f749-vhgx-39h6 Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.91% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-f749-vhgx-39h6 Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.91% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-4j9v-h7pp-725h Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 1.44% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-4j9v-h7pp-725h Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 1.44% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-4j9v-h7pp-725h Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 1.44% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-4j9v-h7pp-725h Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 1.44% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-pfwj-2f93-rf42 Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.80% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-pfwj-2f93-rf42 Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.80% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-pfwj-2f93-rf42 Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.80% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-pfwj-2f93-rf42 Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.80% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-gg8c-3338-xw2f Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability |
High EPSS 0.36% |
>= 10.0.0, < 10.0.11 | 10.0.11 |
| GHSA-gg8c-3338-xw2f Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability |
High EPSS 0.36% |
>= 8.0.0, < 8.0.30 | 8.0.30 |
| GHSA-gg8c-3338-xw2f Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability |
High EPSS 0.36% |
>= 9.0.0, < 9.0.19 | 9.0.19 |
| GHSA-9mrh-pw7c-9mqm Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability |
Medium EPSS 0.87% |
>= 8.0.0, < 8.0.30 | 8.0.30 |
| GHSA-9mrh-pw7c-9mqm Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability |
Medium EPSS 0.87% |
>= 9.0.0, < 9.0.19 | 9.0.19 |
| GHSA-9mrh-pw7c-9mqm Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability |
Medium EPSS 0.87% |
>= 10.0.0, < 10.0.11 | 10.0.11 |
| GHSA-fx4q-gjrx-2jw6 Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability |
High EPSS 0.37% |
>= 8.0.0, < 8.0.30 | 8.0.30 |
| GHSA-fx4q-gjrx-2jw6 Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability |
High EPSS 0.37% |
>= 9.0.0, < 9.0.19 | 9.0.19 |
| GHSA-fx4q-gjrx-2jw6 Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability |
High EPSS 0.37% |
>= 10.0.0, < 10.0.11 | 10.0.11 |
| GHSA-jqhp-238x-qhgf Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability |
High EPSS 0.47% |
>= 10.0.0, < 10.0.11 | 10.0.11 |
| GHSA-jqhp-238x-qhgf Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability |
High EPSS 0.47% |
>= 9.0.0, < 9.0.19 | 9.0.19 |
| GHSA-jqhp-238x-qhgf Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability |
High EPSS 0.47% |
>= 8.0.0, < 8.0.30 | 8.0.30 |
| GHSA-vg44-h755-9hw7 Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability |
High EPSS 0.47% |
>= 8.0.0, < 8.0.30 | 8.0.30 |
| GHSA-vg44-h755-9hw7 Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability |
High EPSS 0.47% |
>= 9.0.0, < 9.0.19 | 9.0.19 |
| GHSA-vg44-h755-9hw7 Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability |
High EPSS 0.47% |
>= 10.0.0, < 10.0.11 | 10.0.11 |
| GHSA-2969-4q4w-w5h3 Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability |
High EPSS 0.46% |
>= 8.0.0, < 8.0.29 | 8.0.29 |
| GHSA-2969-4q4w-w5h3 Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability |
High EPSS 0.46% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-2969-4q4w-w5h3 Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability |
High EPSS 0.46% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-gh2h-rhph-h37g Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability |
High EPSS 4.02% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-gh2h-rhph-h37g Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability |
High EPSS 4.02% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-gh2h-rhph-h37g Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability |
High EPSS 4.02% |
>= 8.0.0, < 8.0.29 | 8.0.29 |
| GHSA-8x9c-mqxv-q2pp Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability |
High EPSS 0.77% |
>= 8.0.0, < 8.0.27 | 8.0.27 |
| GHSA-8x9c-mqxv-q2pp Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability |
High EPSS 0.77% |
>= 10.0.0, < 10.0.8 | 10.0.8 |
| GHSA-8x9c-mqxv-q2pp Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability |
High EPSS 0.77% |
>= 9.0.0, < 9.0.16 | 9.0.16 |
| GHSA-6qmx-42h2-j8h6 .NET Elevation of Privilege Vulnerability |
High EPSS 2.51% |
>= 7.0.0, < 7.0.18 | 7.0.18 |
| GHSA-6qmx-42h2-j8h6 .NET Elevation of Privilege Vulnerability |
High EPSS 2.51% |
< 6.0.29 | 6.0.29 |
| GHSA-6qmx-42h2-j8h6 .NET Elevation of Privilege Vulnerability |
High EPSS 2.51% |
>= 8.0.0, < 8.0.4 | 8.0.4 |
| GHSA-485r-rp8v-998v Microsoft Security Advisory CVE-2023-33127: .NET Remote Code Execution Vulnerability |
High EPSS 1.88% |
>= 6.0.0, < 6.0.20 | 6.0.20 |
| GHSA-485r-rp8v-998v Microsoft Security Advisory CVE-2023-33127: .NET Remote Code Execution Vulnerability |
High EPSS 1.88% |
>= 7.0.0, < 7.0.9 | 7.0.9 |
| GHSA-jh2h-qcrw-ghg7 .NET Remote Code Execution Vulnerability |
High EPSS 1.06% |
>= 6.0.0, < 6.0.18 | 6.0.18 |
| GHSA-jh2h-qcrw-ghg7 .NET Remote Code Execution Vulnerability |
High EPSS 1.06% |
>= 7.0.0, < 7.0.7 | 7.0.7 |
| GHSA-2c7v-qcjp-4mg2 .NET Remote Code Execution Vulnerability |
High EPSS 1.19% |
>= 7.0.0, < 7.0.1 | 7.0.1 |
| GHSA-2c7v-qcjp-4mg2 .NET Remote Code Execution Vulnerability |
High EPSS 1.19% |
>= 3.1.0, < 3.1.32 | 3.1.32 |
| GHSA-2c7v-qcjp-4mg2 .NET Remote Code Execution Vulnerability |
High EPSS 1.19% |
>= 6.0.0, < 6.0.12 | 6.0.12 |
| GHSA-9qcm-fqj9-93m4 Duplicate Advisory: .NET Framework Remote Code Execution Vulnerability. Withdrawn |
High | >= 3.1.0, < 3.1.32 | 3.1.32 |
| GHSA-r4mw-gxf7-vxr9 Remote code execution in Microsoft.WindowsDesktop.App.Ref |
High EPSS 17.19% |
>= 3.1.0, < 3.1.11 | 3.1.11 |
| GHSA-r4mw-gxf7-vxr9 Remote code execution in Microsoft.WindowsDesktop.App.Ref |
High EPSS 17.19% |
>= 3.0.0, < 3.0.2 | 3.0.2 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor