Microsoft Releases Urgent Out-of-Band .NET Security Updates
Article Content
- •Microsoft issued out-of-band updates for .NET versions 8, 9, 10, and 11 RC3.
- •The updates address CVE-2026-70197 and CVE-2026-102870, which were inadequately patched earlier.
- •Immediate application of these updates is recommended to secure affected applications.
On October 25, 2026, Microsoft released out-of-band security updates for .NET versions 8.0.33, 9.0.22, 10.0.14, and 11 RC3. These updates address two vulnerabilities, CVE-2026-70197 and CVE-2026-102870, that were not fully resolved in the previous October 13 updates. The updates are crucial for affected applications and build environments, as .NET Framework is not impacted. Microsoft recommends immediate application of these updates to mitigate potential risks. The updates include specific instructions for standalone Server/DevServer package references and ASP.NET Core runtime installations. Failure to apply these updates could leave systems vulnerable to exploitation.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Microsoft and CVE-2026-102870 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed