CVE-2026-87697 | Microsoft .NET/Visual Studio WPF XPS Synthetic Hyperlinks deserialization

October 14, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Microsoft .NET and Visual Studio. Affected by this issue is some unknown functionality of the component WPF XPS Synthetic Hyperlinks. Such manipulation leads to deserialization.

This vulnerability is listed as CVE-2026-87697. The attack may be performed from remote. There is no available exploit.

It is best practice to apply a patch to resolve this issue.VulDB Recent EntriesRead More