{"uuid": "1734b232-f636-4b22-aa3f-f83f26515ad5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70354", "type": "seen", "source": "https://gist.github.com/alon710/630f5e66f4700cbf8e4ed109500d781a", "content": "# CVE-2026-70354: CVE-2026-70354: Out-of-Bounds Write in .NET Windows Presentation Foundation Subsystem\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-08-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-70354\n\n## Summary\nCVE-2026-70354 is a high-severity local code execution vulnerability affecting multiple versions of the Microsoft .NET runtime, .NET Framework, and Microsoft Visual Studio. The vulnerability is located within the Windows Presentation Foundation (WPF) layout and rendering subsystems, specifically within the parsing and rasterization of complex graphical layouts, XPS files, or custom font structures.\n\n## TL;DR\nAn out-of-bounds write vulnerability in Microsoft .NET WPF layout parsing allows local attackers to execute arbitrary code or escalate privileges by delivering malformed graphical elements or fonts to vulnerable desktop applications.\n\n## Technical Details\n\n- **CWE ID**: CWE-787\n- **Attack Vector**: Local (AV:L)\n- **CVSS v3.1 Score**: 7.8 (High)\n- **Exploit Status**: None\n- **Impact**: Arbitrary Code Execution / Local Privilege Escalation\n- **Affected Subsystem**: Windows Presentation Foundation (WPF) Rendering Subsystem\n\n## Affected Systems\n\n- .NET 10.0\n- .NET 9.0\n- .NET 8.0\n- .NET Framework 3.5\n- .NET Framework 4.6.2/4.7/4.7.1/4.7.2/4.8/4.8.1\n- Visual Studio 2022\n- Visual Studio 2026\n- **.NET 10.0**: >= 10.0.0, < 10.0.11 (Fixed in: `10.0.11`)\n- **.NET 9.0**: >= 9.0.0, < 9.0.19 (Fixed in: `9.0.19`)\n- **.NET 8.0**: >= 8.0.0, < 8.0.30 (Fixed in: `8.0.30`)\n\n## Mitigation\n\n- Apply Microsoft security updates immediately.\n- Restrict untrusted XPS, XAML, and custom font files.\n- Enforce least privilege access controls across all desktop endpoints.\n\n**Remediation Steps:**\n1. Identify all client and server systems running affected versions of .NET or .NET Framework.\n2. Deploy August 2026 security updates for Windows and .NET runtimes.\n3. Audit active desktop endpoints to verify that the version of wpfgfx_v0400.dll has been updated.\n4. Implement application control rules to prevent execution of unauthorized .NET desktop binaries.\n\n## References\n\n- [Microsoft MSRC Security Advisory](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70354)\n- [CVEorg Record Details](https://www.cve.org/CVERecord?id=CVE-2026-70354)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-70354) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-11T23:31:49.069317Z"}