Free plan, no credit card, first error in minutes.
Create a Project for FreeDiscover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
An information disclosure vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF) affects .NET applications on Windows. Applications using vulnerable runtime packages may expose sensitive information through unsafe XAML and XPS operations.
A vulnerability in Microsoft WindowsDesktop App Runtime (WPF) can lead to information disclosure through improper origin validation. Developers should update affected packages and .NET installations to mitigate the issue.
A vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF) allows crafted pixel-shader bytecode to cause heap out-of-bounds writes or reads, potentially leading to remote code execution.
A remote code execution vulnerability in Microsoft WindowsDesktop App Runtime allows attacker-controlled content to be reached via WPF XPS synthetic hyperlinks exposed through UI Automation. Successful exploitation requires user interaction and affects supported .NET applications.
A remote code execution vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF) allows crafted pixel-shader bytecode to desynchronize parsing passes, leading to heap out-of-bounds memory corruption. Patched runtime and SDK versions have been released to resolve the issue.
A remote code execution vulnerability exists in .NET and Visual Studio due to improper untrusted data deserialization in Windows Desktop runtime packages. Applications using affected runtime versions should be updated to patched releases and recompiled if deployed as self-contained applications.
A vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF) allows attacker-controlled XPS glyph coordinates to overflow pointer arithmetic, causing an out-of-bounds write and process termination.
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.