DEV Community

CVE Reports
CVE Reports

Posted on Originally published at cvereports.com

CVE-2026-70007: CVE-2026-70007: Out-of-Bounds Write Vulnerability in .NET Framework and WPF Subsystem

#security #cve #cybersecurity

CVE-2026-70007: Out-of-Bounds Write Vulnerability in .NET Framework and WPF Subsystem

Vulnerability ID: CVE-2026-70007
CVSS Score: 8.8
Published: 2026-10-13

An out-of-bounds write vulnerability in Microsoft .NET Framework, .NET runtime, and Visual Studio allows unauthenticated remote attackers to execute arbitrary code via crafted pixel-shader bytecode or auto-converted clipboard payloads.

TL;DR

A heap-based out-of-bounds write vulnerability (CWE-787) in the Windows Presentation Foundation (WPF) graphics subsystem (CPSTrans::Initialize) and Clipboard API routines allows remote code execution when a targeted application processes malicious graphics assets or clipboard data.

Technical Details

  • CWE ID: CWE-787 (Out-of-bounds Write)
  • Attack Vector: Network (AV:N)
  • CVSS v3.1 Score: 8.8 (High)
  • EPSS Score: Pending Baseline
  • Impact: Remote Code Execution (C:H/I:H/A:H)
  • Exploit Status: Unweaponized / No Public PoC
  • CISA KEV Status: Not Listed

Affected Systems

  • Microsoft .NET 8.0
  • Microsoft .NET 9.0
  • Microsoft .NET 10.0
  • Microsoft .NET 11.0
  • Microsoft .NET Framework 3.5
  • Microsoft .NET Framework 4.6.2 / 4.7 / 4.7.1 / 4.7.2
  • Microsoft .NET Framework 4.8
  • Microsoft .NET Framework 4.8.1
  • Microsoft Visual Studio 2022
  • Microsoft Visual Studio 2026
  • .NET 8.0: >= 8.0.0, < 8.0.32 (Fixed in: 8.0.32)
  • .NET 9.0: >= 9.0.0, < 9.0.21 (Fixed in: 9.0.21)
  • .NET 10.0: >= 10.0.0, < 10.0.13 (Fixed in: 10.0.13)
  • .NET 11.0: >= 11.0.0, < 11.0.0-rc.2 (Fixed in: 11.0.0-rc.2)
  • .NET Framework 4.8.1: < 4.8.9363.0 (Fixed in: 4.8.9363.0)
  • Visual Studio 2022: < 17.14.42 (Fixed in: 17.14.42)

Code Analysis

Commit: 0987b40

Fix Clipboard API auto-conversion issue in GetTypedDataIfAvailable

Commit: 8319b24

Add TrueType Subsetting Table Length Safeguards in TtfDelta/modtable.cpp

Mitigation Strategies

  • Apply official Microsoft security updates for affected .NET, .NET Framework, and Visual Studio products.
  • Enforce least-privilege user execution policies to limit the potential impact of code execution.
  • Monitor process trees for anomalous child process spawning from WPF hosting binaries like PresentationHost.exe.

Remediation Steps:

  1. Identify all systems running vulnerable versions of .NET runtime (8.0, 9.0, 10.0, 11.0), .NET Framework, or Visual Studio.
  2. Deploy Microsoft Security Updates released on October 13, 2026 via Windows Update, WSUS, or enterprise deployment tools.
  3. Verify that .NET 8.0 is updated to >= 8.0.32, .NET 9.0 to >= 9.0.21, .NET 10.0 to >= 10.0.13, and .NET 11.0 to >= 11.0.0-rc.2.
  4. Ensure Visual Studio 2022 is updated to version 17.14.42 or higher.

References

Read the full report for CVE-2026-70007 on our website for more details including interactive diagrams and full exploit analysis.

Top comments (0)