Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-62897

Fixed upstream EPSS <1%CVSS 7.0

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.

Published 2026-08-11 · CVE record · OSV

Products: Microsoft .NET 10.0, Microsoft .NET 8.0, Microsoft .NET 9.0, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5 AND 4.7.2, Microsoft .NET Framework 3.5 AND 4.8, Microsoft .NET Framework 4.8.1, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.8

Fixed upstream

EcosystemPackageFixed in
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-arm6410.0.11
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-arm649.0.19
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-arm648.0.30
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-x6410.0.11
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-x649.0.19
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-x648.0.30
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-x8610.0.11
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-x869.0.19
NuGetMicrosoft.WindowsDesktop.App.Runtime.win-x868.0.30

Distro releases

ReleasePackageFixed in
Ubuntu 22.04 LTSdotnet7no fix