instal the new version for android Microsoft .NET Desktop Runtime 7.0.7

This vulnerability has been fixed in version 0.8.2 and 0.9.3. Any user using Livebook Desktop on Windows is potentially vulnerable to arbitrary code execution when they expect Livebook to be opened from browser.

On Windows, it is possible to open a `livebook://` link from a browser which opens Livebook Desktop and triggers arbitrary code execution on victim's machine. Livebook is a web application for writing interactive and collaborative code notebooks. Thus, it is possible for an unprivileged application to obtain a handle to the NetFilterSDK wrapper before the service obtains exclusive access. In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver. NOTE: the vendor's perspective is 'this is intended behavior as the application can be locked using a password.' ** DISPUTED ** Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user interface's rules tab. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.) Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element.

Instal the new version for android Microsoft .NET Desktop Runtime 7.0.7