CVE-2026-87697Published

.NET Remote Code Execution Vulnerability

cve-program · CVE-2026-87697

Published

.NET 10.0 runtime

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": ".NET 10.0 runtime",
                    "versions": [
                        {
                            "version": "10.0.0",
                            "lessThan": "10.0.13",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

.NET 11.0 runtime

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": ".NET 11.0 runtime",
                    "versions": [
                        {
                            "version": "11.0.0",
                            "lessThan": "11.0.0-rc.2",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

.NET 8.0 runtime

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": ".NET 8.0 runtime",
                    "versions": [
                        {
                            "version": "8.0.0",
                            "lessThan": "8.0.32",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

.NET 9.0 runtime

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": ".NET 9.0 runtime",
                    "versions": [
                        {
                            "version": "9.0.0",
                            "lessThan": "9.0.21",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Microsoft Visual Studio 2022 version 17.14

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": "Microsoft Visual Studio 2022 version 17.14",
                    "versions": [
                        {
                            "version": "17.14.0",
                            "lessThan": "17.14.42",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Microsoft Visual Studio 2026 version 18.10

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": "Microsoft Visual Studio 2026 version 18.10",
                    "versions": [
                        {
                            "version": "18.10.0",
                            "lessThan": "18.10.4",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

nvd · CVE-2026-87697

Published

No affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.

osv · GHSA-c27m-942f-rcfh

Published

Microsoft.WindowsDesktop.App.Runtime.win-arm64

NuGet

ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21

21 explicitly affected versions

9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9

Microsoft.WindowsDesktop.App.Runtime.win-x64

NuGet

ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21

21 explicitly affected versions

9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9

Microsoft.WindowsDesktop.App.Runtime.win-x86

NuGet

ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21

21 explicitly affected versions

9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9

Microsoft.WindowsDesktop.App.Runtime.win-arm64

NuGet

ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32

31 explicitly affected versions

8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.2, 8.0.20, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.3, 8.0.30, 8.0.31, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8

Microsoft.WindowsDesktop.App.Runtime.win-x64

NuGet

ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32

31 explicitly affected versions

Microsoft.WindowsDesktop.App.Runtime.win-x86

NuGet

ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32

31 explicitly affected versions

Microsoft.WindowsDesktop.App.Runtime.win-arm64

NuGet

ECOSYSTEM · introduced 11.0.0-preview.1 → fixed 11.0.0-rc.2

Microsoft.WindowsDesktop.App.Runtime.win-x64

NuGet

ECOSYSTEM · introduced 11.0.0-preview.1 → fixed 11.0.0-rc.2

Microsoft.WindowsDesktop.App.Runtime.win-x86

NuGet

ECOSYSTEM · introduced 11.0.0-preview.1 → fixed 11.0.0-rc.2

Microsoft.WindowsDesktop.App.Runtime.win-arm64

NuGet

ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13

13 explicitly affected versions

10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9

Microsoft.WindowsDesktop.App.Runtime.win-x64

NuGet

ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13

13 explicitly affected versions

10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9

Microsoft.WindowsDesktop.App.Runtime.win-x86

NuGet

ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13

13 explicitly affected versions

10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9