Mmastodon Technology Cybersecurity first seen 2 d ago, last 2 d ago, peak #1

Microsoft .NET hit by new remote code execution flaw CVE-2026-70035

Original: CVE-2026-70035 is a remote code execution flaw in Microsoft .NET Windows Desktop Runtime (WPF), from unsafe deserializat

A remote code execution vulnerability, tracked as CVE-2026-70035, has been disclosed in Microsoft's .NET Windows Desktop Runtime, affecting the WPF framework. The flaw stems from unsafe deserialization and URI handling in XAML and XPS, and affects .NET 8, 9, 10 and 11 preview runtimes. No exploitation has been confirmed, and fixes are available in versions 8.0.32, 9.0.21 and 10.0.13. Security researchers urge developers to patch promptly.

Why now: A newly disclosed RCE vulnerability in widely used .NET runtimes pushes administrators and developers to assess exposure and patch their systems.

Microsoft .NET Windows Desktop Runtime WPF CVE-2026-70035

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 2 d ago to 2 d ago.

Evidence

CVE-2026-70035 is a remote code execution flaw in Microsoft .NET Windows Desktop Runtime (WPF), from unsafe deserialization and URI handling in XAML and XPS. No exploitation is confirmed. Affected: .NET 8, 9, 10 and 11 preview runtimes. Fix: update to 8.0.32, 9.0.21, 10.0.13 or… · suriq@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/2204735