Ends in 27 daysSTS
.NET 9.0
Support ends on 10 Nov 2026 (in 27 days). The newest release is 9.0.21, published 13 Oct 2026.
What to do
Plan the move now: after 10 Nov 2026 .NET 9.0 gets no more updates, including security fixes. Until then, stay on 9.0.21.
Move to .NET 10.0Latest 10.0.13 · supported until 14 Nov 202824 more months of support9.0.21Newest release · 1d ago
27
Days of support left · until 10 Nov 2026
8Releases in the last 12 months · typically every 28 days
86CVEs fixed in collected releasesIs your version current?
Compared with the publisher's releases of this line.NET support timeline
From first preview through release to end of support, as the vendors publish them- .NET 9.0 and .NET 8.0 end on 10 Nov 2026 (in 27 days).
- The newest supported line is .NET 10.0, supported until 14 Nov 2028.
- In preview: .NET 11.0.0-rc.2, published 13 Oct 2026.
.NET 9.0STS9.0.21 · until 10 Nov 2026 (in 27 days)
Ticks are releases; the red ones fix CVEs. Dates come from each vendor's release and lifecycle data and move when the vendor changes them.
Releases of .NET 9.0
8 collected, newest first| Version | Published | Release | What the notes say |
|---|---|---|---|
| 9.0.21 | 13 Oct 2026 | SDK 9.0.319 · security release | CVE-2026-66822CVE-2026-58280CVE-2026-69651CVE-2026-96958and 36 more |
| 9.0.20 | 8 Sep 2026 | SDK 9.0.318 · security release | CVE-2026-69439CVE-2026-71328CVE-2026-69522CVE-2026-69304and 2 more |
| 9.0.19 | 11 Aug 2026 | SDK 9.0.317 · security release | CVE-2026-62898CVE-2026-62899CVE-2026-62900CVE-2026-62901and 6 more |
| 9.0.18 | 14 Jul 2026 | SDK 9.0.316 · security release | CVE-2026-50651CVE-2026-50526CVE-2026-50524CVE-2026-50646and 13 more |
| 9.0.17 | 9 Jun 2026 | SDK 9.0.315 · security release | CVE-2026-45591CVE-2026-45491CVE-2026-45490 |
| 9.0.16 | 12 May 2026 | SDK 9.0.314 · security release | CVE-2026-32177CVE-2026-35433CVE-2026-32175CVE-2026-42899 |
| 9.0.15 | 14 Apr 2026 | SDK 9.0.313 · security release | CVE-2026-26171CVE-2026-32203CVE-2026-33116CVE-2026-32178 |
| 9.0.14 | 10 Mar 2026 | SDK 9.0.312 · security release | CVE-2026-26130CVE-2026-26127 |
Security fixes
CVEs the collected releases fix, newest first| CVE | Severity | Fixed in |
|---|---|---|
| CVE-2026-105016Microsoft QUIC Remote Code Execution Vulnerability | Critical · CVSS 9.8 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-88092ASP.NET Core Tampering Vulnerability | Important · CVSS 9.4 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-70188ASP.NET Core Security Feature Bypass Vulnerability | Important · CVSS 9.1 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-70007.NET Framework Remote Code Execution Vulnerability | Important · CVSS 8.8 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-70035.NET Framework Remote Code Execution Vulnerability | Important · CVSS 8.8 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-70174.NET Remote Code Execution Vulnerability | Important · CVSS 8.8 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-83520.NET Remote Code Execution Vulnerability | Important · CVSS 8.8 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-85363.NET Framework Elevation of Privilege Vulnerability | Important · CVSS 8.8 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-87697.NET Remote Code Execution Vulnerability | Important · CVSS 8.8 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-96224.NET Remote Code Execution Vulnerability | Important · CVSS 8.8 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-96230ASP.NET Core Remote Code Execution Vulnerability | Important · CVSS 8.8 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-96235.NET Remote Code Execution Vulnerability | Important · CVSS 8.8 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-70175ASP.NET Core Elevation of Privilege Vulnerability | Important · CVSS 8.1 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-96225.NET Elevation of Privilege Vulnerability | Important · CVSS 7.8 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-96231.NET Elevation of Privilege Vulnerability | Important · CVSS 7.8 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-58280.NET Denial of Service Vulnerability | Important · CVSS 7.5 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-69651.NET Denial of Service Vulnerability | Important · CVSS 7.5 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-70159ASP.NET Core Denial of Service Vulnerability | Important · CVSS 7.5 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-70179ASP.NET Core Elevation of Privilege Vulnerability | Important · CVSS 7.5 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-70181ASP.NET Core Denial of Service Vulnerability | Important · CVSS 7.5 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-70183ASP.NET Core Elevation of Privilege Vulnerability | Important · CVSS 7.5 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-70186ASP.NET Core Denial of Service Vulnerability | Important · CVSS 7.5 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-84008.NET Denial of Service Vulnerability | Important · CVSS 7.5 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-96232.NET Information Disclosure Vulnerability | Important · CVSS 7.5 | 9.0.21 · 13 Oct 2026 |
| CVE-2026-96233ASP.NET Core Denial of Service Vulnerability | Important · CVSS 7.5 | 9.0.21 · 13 Oct 2026 |
61 more CVEs are named in older releases' notes.
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.
Keep track
- Add the end of support to your calendar: one event on 10 Nov 2026, with a reminder 30 days before.
- .NET RSS feed: new releases, known issues, retirements and roadmap changes.
- What I run: list the versions you run and see which fall behind or out of support.
- Everything about .NET: its timeline, notices, roadmap and other lines.