Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-62871

Fixed upstream EPSS <1%CVSS 7.8

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

Published 2026-08-11 · CVE record · OSV

Products: Microsoft .NET 8.0, Microsoft .NET 9.0, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.8

Fixed upstream

EcosystemPackageFixed in
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-arm6410.0.11
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-arm649.0.19
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-arm648.0.30
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-x6410.0.11
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-x649.0.19
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-x648.0.30
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-x8610.0.11
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-x869.0.19
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-x868.0.30

Distro releases

ReleasePackageFixed in
Ubuntu 22.04 LTSdotnet7no fix