Microsoft.WindowsDesktop.App.Runtime.win-Arm64 (>= 8.0.0, <= 8.0.28)

A high-severity remote code execution vulnerability (CVE-2026-50646) in .NET WPF allows arbitrary code execution via maliciously crafted XAML input.