CVE-2026

Api.Msrc.Microsoft • October 15, 2026

Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple High-Risk Vulnerabilities in .NET Framework Addressed in October 2026 Update On October 13, 2026, Microsoft released an update for Windows 11, version 26H1, addressing several high-severity vulnerabilities in the.NET Framework. The update includes fixes for multiple CVEs, including CVE-2026-70007, CVE-2026-70035, and CVE-2026-85363, all rated CVSS 8.8, indicating a high risk of remote code execution. Other vulnerabilities, such as CVE-2026-58280 and CVE-2026-69651, also received fixes, with CVSS scores of 7.5. The vulnerabilities could allow attackers to execute arbitrary code or cause denial of service. Users are advised to apply the update as part of their regular maintenance. The vulnerabilities were disclosed on the same day as the patch release, indicating no status. Microsoft recommends checking prerequisites and restart requirements before installation. 4 sources 71

Extracted Entities

Tools (1)

Microsoft Visual Studio