Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Fixed by KB5126105Clear
| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|---|
| CVE-2026-69439 | .NET and Visual Studio Elevation of Privilege Vulnerability.NET and Visual Studio | Important | 8.8 | 0.8% | EoPNetwork | Revised 25 Sep | KB5126104KB5126105+1 |
| CVE-2026-69522 | .NET and Visual Studio Remote Code Execution VulnerabilityVisual Studio | Important | 8.8 | 0.8% | RCENetwork | Revised 29 Sep | KB5123099KB5126043+16 |
| CVE-2026-71328 | .NET and Visual Studio Remote Code Execution VulnerabilityVisual Studio | Important | 8.8 | 0.8% | RCENetwork | Revised 25 Sep | KB5126104KB5126105+1 |
| CVE-2026-69806 | .NET Elevation of Privilege Vulnerability.NET | Important | 7.0 | 0.8% | EoPLocal | Revised 25 Sep | KB5126105KB5126106 |
| CVE-2026-58649 | .NET Information Disclosure Vulnerability.NET | Important | 6.5 | 0.4% | Information DisclosureNetwork | KB5126104KB5126105+1 | |
| CVE-2026-69304 | ASP.NET Core Denial of Service VulnerabilityASP.NET Core | Important | 5.9 | 0.9% | DoSNetwork | Revised 25 Sep | KB5126104KB5126105+1 |
Advisories
MSRC guidance without a CVE of its own · 1 advisory
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.