Microsoft.WindowsDesktop.App.Runtime.win-Arm64 (>= 9.0.0, <= 9.0.17)

A high-severity remote code execution vulnerability (CVE-2026-50646) in .NET WPF allows arbitrary code execution via maliciously crafted XAML input.