THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-gh2h-rhph-h37g (high) — Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability

[GHSA] GHSA-gh2h-rhph-h37g (high) — Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability

highgithub_advisoriesPublished 2026-09-08

GHSA-gh2h-rhph-h37g Severity: high CVE: CVE-2026-50646

Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability

## Executive summary

Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation (WPF). This advisory also provides guidance on what developers can do to update their applications to remove

Indicators of compromise

41ae55e9310ff27fa6f26af4727e5590md5
CVE-2026-50646cve
https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-arm64url
https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x64url
https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x86url
https://www.cve.org/CVERecord?id=CVE-2026-50646url

Original source: https://github.com/advisories/GHSA-gh2h-rhph-h37g