.NET 11.0
Preview builds, not for production. The newest release is 11.0.0-rc.2, published 13 Oct 2026.
What to do
Preview builds are for testing new features, not production. Run the released line where it matters.
Released line .NET 10.0Latest 10.0.13 · supported until 14 Nov 2028Is your version current?
Compared with the publisher's releases of this line.NET support timeline
From first preview through release to end of support, as the vendors publish them- .NET 9.0 and .NET 8.0 end on 10 Nov 2026 (in 27 days).
- The newest supported line is .NET 10.0, supported until 14 Nov 2028.
- In preview: .NET 11.0.0-rc.2, published 13 Oct 2026.
Ticks are releases; the red ones fix CVEs. Dates come from each vendor's release and lifecycle data and move when the vendor changes them.
Releases of .NET 11.0
8 collected, newest first| Version | Published | Release | What the notes say |
|---|---|---|---|
| 11.0.0-rc.2 | 13 Oct 2026 | SDK 11.0.100-rc.2.26504.105 · security release | CVE-2026-66822CVE-2026-58280CVE-2026-69651CVE-2026-96958and 35 more |
| 11.0.0-rc.1 | 8 Sep 2026 | SDK 11.0.100-rc.1.26425.128 · security release | CVE-2026-69439CVE-2026-71328CVE-2026-69522CVE-2026-69304and 2 more |
| 11.0.0-preview.7 | 11 Aug 2026 | SDK 11.0.100-preview.7.26381.103 | — |
| 11.0.0-preview.6 | 14 Jul 2026 | SDK 11.0.100-preview.6.26359.118 | — |
| 11.0.0-preview.5 | 9 Jun 2026 | SDK 11.0.100-preview.5.26302.115 | — |
| 11.0.0-preview.4 | 12 May 2026 | SDK 11.0.100-preview.4.26230.115 | — |
| 11.0.0-preview.3 | 14 Apr 2026 | SDK 11.0.100-preview.3.26207.106 | — |
| 11.0.0-preview.2 | 10 Mar 2026 | SDK 11.0.100-preview.2.26159.112 | — |
Security fixes
CVEs the collected releases fix, newest first| CVE | Severity | Fixed in |
|---|---|---|
| CVE-2026-105016Microsoft QUIC Remote Code Execution Vulnerability | Critical · CVSS 9.8 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-88092ASP.NET Core Tampering Vulnerability | Important · CVSS 9.4 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-70188ASP.NET Core Security Feature Bypass Vulnerability | Important · CVSS 9.1 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-102870ASP.NET Core Remote Code Execution Vulnerability | Important · CVSS 8.8 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-70007.NET Framework Remote Code Execution Vulnerability | Important · CVSS 8.8 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-70035.NET Framework Remote Code Execution Vulnerability | Important · CVSS 8.8 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-70174.NET Remote Code Execution Vulnerability | Important · CVSS 8.8 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-83520.NET Remote Code Execution Vulnerability | Important · CVSS 8.8 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-85363.NET Framework Elevation of Privilege Vulnerability | Important · CVSS 8.8 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-87697.NET Remote Code Execution Vulnerability | Important · CVSS 8.8 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-96224.NET Remote Code Execution Vulnerability | Important · CVSS 8.8 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-96230ASP.NET Core Remote Code Execution Vulnerability | Important · CVSS 8.8 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-96235.NET Remote Code Execution Vulnerability | Important · CVSS 8.8 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-96957.NET Security Feature Bypass Vulnerability | Important · CVSS 8.8 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-70197.NET Remote Code Execution Vulnerability | Important · CVSS 8.1 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-96225.NET Elevation of Privilege Vulnerability | Important · CVSS 7.8 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-96231.NET Elevation of Privilege Vulnerability | Important · CVSS 7.8 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-58280.NET Denial of Service Vulnerability | Important · CVSS 7.5 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-69651.NET Denial of Service Vulnerability | Important · CVSS 7.5 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-70159ASP.NET Core Denial of Service Vulnerability | Important · CVSS 7.5 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-70183ASP.NET Core Elevation of Privilege Vulnerability | Important · CVSS 7.5 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-84008.NET Denial of Service Vulnerability | Important · CVSS 7.5 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-96232.NET Information Disclosure Vulnerability | Important · CVSS 7.5 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-96233ASP.NET Core Denial of Service Vulnerability | Important · CVSS 7.5 | 11.0.0-rc.2 · 13 Oct 2026 |
| CVE-2026-96236ASP.NET Core Denial of Service Vulnerability | Important · CVSS 7.5 | 11.0.0-rc.2 · 13 Oct 2026 |
20 more CVEs are named in older releases' notes.
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.
Keep track
- .NET RSS feed: new releases, known issues, retirements and roadmap changes.
- What I run: list the versions you run and see which fall behind or out of support.
- Everything about .NET: its timeline, notices, roadmap and other lines.