Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Fixed by KB5135241Clear
| CVE | Vulnerability | Severity | CVSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|
| CVE-2026-114146 | ASP.NET Core Elevation of Privilege VulnerabilityASP.NET Core | Important | 9.0 | EoPNetwork | KB5135241KB5135242+1 | |
| CVE-2026-105544 | .NET Elevation of Privilege Vulnerability.NET | Important | 7.5 | EoPLocal | KB5135241KB5135242+1 | |
| CVE-2026-114147 | ASP.NET Core Denial of Service VulnerabilityASP.NET Core | Important | 7.5 | DoSNetwork | KB5135241KB5135242+1 | |
| CVE-2026-114149 | ASP.NET Core Denial of Service VulnerabilityASP.NET Core | Important | 7.5 | DoSNetwork | KB5135241KB5135242+1 |
Advisories
MSRC guidance without a CVE of its own · 1 advisory
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.