Event Tracing for Windows (ETW) is a powerful logging mechanism built into the Windows OS and is used extensively in Windows. You can also log ETW events yourself code using the System.Diagnostics.Tracing.EventSource class. The TraceEvent library conains the classes needed to control ETW providers (including .NET EventSources) and parse the events they emit. The library includes -- TraceEventSession which can enable ETW providers, -- EtwTraceEventSource which lets you read the stream of ETW events, and -- TraceLog which is is digested form of ETW events which include decoded stack traces associated with the events. See https://github.com/Microsoft/perfview/blob/master/documentation/TraceEvent/TraceEventLibrary.md for more.
96%
Total Score
97
81
100
100
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-601590 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. Microsoft.Diagnostics.Tracing.TraceEvent is vulnerable to Denial of Service (DoS) in versions 3.1.21 - 3.2.5. | 3.1.21 - 3.2.5 | Medium |
AIKIDO-2026-527822 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. Microsoft.Diagnostics.Tracing.TraceEvent is vulnerable to Denial of Service (DoS) in versions 3.1.3 - 3.2.5. | 3.1.3 - 3.2.5 | Medium |
AIKIDO-2026-227377 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. Microsoft.Diagnostics.Tracing.TraceEvent is vulnerable to Out-of-bounds Read in versions 1.0.3 - 3.2.5. | 1.0.3 - 3.2.5 | Medium |
AIKIDO-2024-10438 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. Microsoft.Diagnostics.Tracing.TraceEvent is vulnerable to Deserialization of Untrusted Data in versions 2.0.0 - 3.1.16. | 2.0.0 - 3.1.16 | High |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
microsoft.win32.registry Version [5.0.0, ) | — | — |
system.collections.immutable Version [9.0.8, ) | — | — |
system.reflection.metadata Version [9.0.8, ) | — | — |
system.reflection.typeextensions Version [4.7.0, ) | — | — |
system.runtime.compilerservices.unsafe Version [6.1.2, ) | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant