CVE-2026-96234

Name of the Vulnerable Software and Affected Versions Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 8.0.0 through 8.0.31 Microsoft.WindowsDesktop.App.Runtime.win-x64 versions 8.0.0 through 8.0.31 Microsoft.WindowsDesktop.App.Runtime.win-x86 versions 8.0.0 through 8.0.31 Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 9.0.0 through 9.0.20 Microsoft.WindowsDesktop.App.Runtime.win-x64 versions 9.0.0 through 9.0.20 Microsoft.WindowsDesktop.App.Runtime.win-x86 versions 9.0.0 through 9.0.20 Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 10.0.0 through 10.0.12 Microsoft.WindowsDesktop.App.Runtime.win-x64 versions 10.0.0 through 10.0.12 Microsoft.WindowsDesktop.App.Runtime.win-x86 versions 10.0.0 through 10.0.12 Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.WindowsDesktop.App.Runtime.win-x64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.WindowsDesktop.App.Runtime.win-x86 versions 11.0.0-preview.1 through 11.0.0-rc.1

Description An origin validation error in .NET (WPF) allows an unauthorized attacker to disclose information over a network. The issue involves unsafe URI fetching and navigation, propagation of untrusted-input state through hyperlink navigation, and the caching of positive DNS zone-policy decisions. Additionally, the vulnerability is linked to a lack of TrueType font protection and insufficient XAML nesting-depth limits.

Recommendations Update Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 8.0.0 through 8.0.31 to version 8.0.32 Update Microsoft.WindowsDesktop.App.Runtime.win-x64 versions 8.0.0 through 8.0.31 to version 8.0.32 Update Microsoft.WindowsDesktop.App.Runtime.win-x86 versions 8.0.0 through 8.0.31 to version 8.0.32 Update Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 9.0.0 through 9.0.20 to version 9.0.21 Update Microsoft.WindowsDesktop.App.Runtime.win-x64 versions 9.0.0 through 9.0.20 to version 9.0.21 Update Microsoft.WindowsDesktop.App.Runtime.win-x86 versions 9.0.0 through 9.0.20 to version 9.0.21 Update Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 10.0.0 through 10.0.12 to version 10.0.13 Update Microsoft.WindowsDesktop.App.Runtime.win-x64 versions 10.0.0 through 10.0.12 to version 10.0.13 Update Microsoft.WindowsDesktop.App.Runtime.win-x86 versions 10.0.0 through 10.0.12 to version 10.0.13 Update Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2 Update Microsoft.WindowsDesktop.App.Runtime.win-x64 versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2 Update Microsoft.WindowsDesktop.App.Runtime.win-x86 versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2 Self-contained applications targeting any of the impacted versions must be recompiled and redeployed.