Skip to content
ThreatCluster

Multiple High-Risk Vulnerabilities in .NET Framework Addressed in October 2026 Update

First seen 16 Oct 2026, 05:50 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 16, 2026 at 07:37 UTC
  • •Microsoft's October 2026 update addresses multiple high-severity .NET vulnerabilities.
  • •Key vulnerabilities include CVE-2026-70007 and CVE-2026-85363, both rated CVSS 8.8.
  • •Users are urged to apply the update promptly to mitigate risks.

On October 13, 2026, Microsoft released an update for Windows 11, version 26H1, addressing several high-severity vulnerabilities in the.NET Framework. The update includes fixes for multiple CVEs, including CVE-2026-70007, CVE-2026-70035, and CVE-2026-85363, all rated CVSS 8.8, indicating a high risk of remote code execution. Other vulnerabilities, such as CVE-2026-58280 and CVE-2026-69651, also received fixes, with CVSS scores of 7.5. The vulnerabilities could allow attackers to execute arbitrary code or cause denial of service. Users are advised to apply the update as part of their regular maintenance. The vulnerabilities were disclosed on the same day as the patch release, indicating no status. Microsoft recommends checking prerequisites and restart requirements before installation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-08-11
CVE-2026-62886 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
Microsoft releases security update for Windows 11
The update addresses several high-severity vulnerabilities in the .NET Framework, including remote code execution and denial of service flaws.
Support.Microsoft
2026-10-13
CVE-2026 vulnerabilities disclosed
Multiple CVEs were disclosed on the same day as the patch, including CVE-2026-70007 and CVE-2026-85363, both with high CVSS scores.
Support.Microsoft
2026-10-13
CVE-2026-58280 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-69651 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-70007 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-70035 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-70174 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-83520 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-84008 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (4)

Following this threat?

Track CVE-2026-58280 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (18)

1 / 2

Common questions

Which CVEs are addressed in the update?
The update addresses multiple CVEs, including CVE-2026-70007, CVE-2026-70035, and CVE-2026-85363.
What is the CVSS score of the most severe vulnerabilities?
The most severe vulnerabilities, such as CVE-2026-70007, have a CVSS score of 8.8.
How should users apply the update?
Users should check the prerequisites and restart requirements before installing the update as part of their regular maintenance.