Security
CVE detail from Microsoft's public MSRC CVRF API, cross-checked with CISA's Known Exploited Vulnerabilities catalog. Counts cover Microsoft-issued CVEs; republished third-party CVEs such as Chromium or Linux are hidden unless you include them.
Fixed by KB5127685Clear
| CVE | Vulnerability | Severity | CVSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|
| CVE-2026-96233 | ASP.NET Core Denial of Service VulnerabilityASP.NET Core | Important | 7.5 | DoSNetwork | KB5126868KB5127660+20 | |
| CVE-2026-96958 | .NET Denial of Service Vulnerability.NET | Important | 7.5 | DoSNetwork | KB5126868KB5127660+17 | |
| CVE-2026-96959 | .NET Denial of Service Vulnerability.NET | Important | 7.5 | DoSNetwork | KB5126868KB5127660+17 | |
| CVE-2026-96960 | .NET Denial of Service Vulnerability.NET | Important | 7.5 | DoSNetwork | KB5126868KB5127660+17 | |
| CVE-2026-97788 | Active Directory Federation Services (AD FS) Information Disclosure VulnerabilityActive Directory Federation Services (AD FS) | Important | 7.5 | Information DisclosureNetwork | KB5126646KB5126651+26 | |
| CVE-2026-97801 | .NET Framework Tampering Vulnerability.NET Framework | Important | 7.5 | TamperingNetwork | KB5126868KB5127660+17 |
Advisories
MSRC guidance without a CVE of its own · 1 advisory
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.