UBUNTU-CVE-2026-50650
- Source
- https://ubuntu.com/security/CVE-2026-50650
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-50650.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-50650
- Upstream
- Published
- 2026-07-14T00:00:00Z
- Modified
- 2026-07-20T16:20:03.380051700Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
An elevation of privilege vulnerability exists in Windows Presentation Foundation (WPF) in .NET 8, .NET 9, and .NET 10 when parsing specially crafted XAML input. An attacker who successfully exploits this vulnerability could elevate privileges on the affected system.
- References
-
- https://ubuntu.com/security/CVE-2026-50650
- https://www.cve.org/CVERecord?id=CVE-2026-50650
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650
- https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-july-2026-servicing-updates
- https://github.com/dotnet/announcements/issues/421
Affected packages
Ubuntu:22.04:LTS / dotnet7
Package
- Name
- dotnet7
- Purl
- pkg:deb/ubuntu/dotnet7?arch=source&distro=jammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
7.*
7.0.105-0ubuntu1~22.04.1
7.0.107-0ubuntu1~22.04.1
7.0.108-0ubuntu1~22.04.1
7.0.109-0ubuntu1~22.04.1
7.0.110-0ubuntu1~22.04.1
7.0.111-0ubuntu1~22.04.1
7.0.112-0ubuntu1~22.04.1
7.0.113-0ubuntu1~22.04.1
7.0.114-0ubuntu1~22.04.1
7.0.115-0ubuntu1~22.04.1
7.0.116-0ubuntu1~22.04.1
7.0.117-0ubuntu1~22.04.1
7.0.117-0ubuntu1~22.04.2
7.0.119-0ubuntu1~22.04.1
Ecosystem specific
{
"binaries": [
{
"binary_version": "7.0.119-0ubuntu1~22.04.1",
"binary_name": "aspnetcore-runtime-7.0"
},
{
"binary_version": "7.0.119-0ubuntu1~22.04.1",
"binary_name": "aspnetcore-targeting-pack-7.0"
},
{
"binary_version": "7.0.119-0ubuntu1~22.04.1",
"binary_name": "dotnet-apphost-pack-7.0"
},
{
"binary_version": "7.0.119-0ubuntu1~22.04.1",
"binary_name": "dotnet-host-7.0"
},
{
"binary_version": "7.0.119-0ubuntu1~22.04.1",
"binary_name": "dotnet-hostfxr-7.0"
},
{
"binary_version": "7.0.119-0ubuntu1~22.04.1",
"binary_name": "dotnet-runtime-7.0"
},
{
"binary_version": "7.0.119-0ubuntu1~22.04.1",
"binary_name": "dotnet-sdk-7.0"
},
{
"binary_version": "7.0.119-0ubuntu1~22.04.1",
"binary_name": "dotnet-sdk-7.0-source-built-artifacts"
},
{
"binary_version": "7.0.119-0ubuntu1~22.04.1",
"binary_name": "dotnet-targeting-pack-7.0"
},
{
"binary_version": "7.0.119-0ubuntu1~22.04.1",
"binary_name": "dotnet-templates-7.0"
},
{
"binary_version": "7.0.119-0ubuntu1~22.04.1",
"binary_name": "dotnet7"
},
{
"binary_version": "7.0.119-0ubuntu1~22.04.1",
"binary_name": "netstandard-targeting-pack-2.1-7.0"
}
]
}