ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 274/275 feeds/APIs · 469/469 docs · 8/9 advisories · checked 16:19 UTC Customize Public modeDiscuss ChangeIntel on Discord

Recorded 30 Oct 2026 at 16:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.

.NET Framework updateMicrosoft Learn and Support

KB5120716

September 8, 2026-Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 (KB5120716)

What it said

KB
KB5120716
Applies to
Windows Server 2012
Related KBs
KB5126147
CVEs named by Microsoft
CVE-2026-65810, CVE-2026-62872, CVE-2026-62886, CVE-2026-62897, CVE-2026-70354, CVE-2026-62902
Readiness
This is a .NET Framework servicing update, not a Windows OS build. Review Microsoft's support article and test the applicable framework versions; OS release-health coverage does not establish this update's deployment readiness.
Windows versions and builds
Not in the collected release tables
Restart required
Not stated in collected security fixes
CVEs fixed
CVE-2026-62872, CVE-2026-65810, CVE-2026-70354
Known issues caused
None in the collected release health data
Known issues resolved
None in the collected release health data
Included security update
None identified in the collected release tables
CVEs listed directly for this KB
CVE-2026-62872, CVE-2026-65810, CVE-2026-70354
Missing security release
None identified in collected security coverage

Source evidence when recorded

dotnet-framework-updates
IncompleteRead 30 Oct 2026 at 10:24 UTC
Microsoft security releases
Complete at observationRead 30 Oct 2026 at 16:58 UTC

Coverage describes the sources at this observation. A complete read then does not establish their current position.

What changed

  1. Security fixes updated · Applies to: Microsoft .NET Framework 3.5 on Windows Server 2012, Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation) → Windows Server 2012
Page history

Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.

Cite this version
Field-level log (32)

Up to 100 recent field edits are shown; older edits may be outside retention.

  1. 30 Oct 2026 · 16:59:46 UTC Source coverage: dotnet-framework-updatesCurrent → Incomplete
  2. 30 Oct 2026 · 10:28:10 UTC Source coverage: dotnet-framework-updatesIncomplete → Current
  3. 30 Oct 2026 · 04:11:14 UTC Source coverage: dotnet-framework-updatesCurrent → Incomplete
  4. 29 Oct 2026 · 21:53:13 UTC Source coverage: dotnet-framework-updatesIncomplete → Current
  5. 29 Oct 2026 · 15:26:56 UTC Source coverage: dotnet-framework-updatesCurrent → Incomplete
  6. 29 Oct 2026 · 11:09:34 UTC Source coverage: dotnet-framework-updatesIncomplete → Current
  7. 27 Oct 2026 · 12:20:40 UTC Source coverage: dotnet-framework-updatesCurrent → Incomplete
  8. 27 Oct 2026 · 05:37:25 UTC Source coverage: dotnet-framework-updatesIncomplete → Current
  9. 26 Oct 2026 · 22:55:57 UTC Source coverage: dotnet-framework-updatesCurrent → Incomplete
  10. 26 Oct 2026 · 16:46:58 UTC Source coverage: dotnet-framework-updatesIncomplete → Current
  11. 23 Oct 2026 · 09:33:49 UTC Source coverage: msrc-cvrfIncomplete → Current
  12. 23 Oct 2026 · 08:31:50 UTC Source coverage: msrc-cvrfCurrent → Incomplete
  13. 21 Oct 2026 · 10:34:24 UTC Source coverage: dotnet-framework-updatesCurrent → Incomplete
  14. 21 Oct 2026 · 04:01:31 UTC Source coverage: dotnet-framework-updatesIncomplete → Current
  15. 19 Oct 2026 · 15:12:40 UTC ReadinessThis is a .NET Framework servicing update, not a Windows OS build. Review Microsoft's support article and test the applicable framework versions; OS release-health coverage does not establish this update's deployment readiness.
  16. 19 Oct 2026 · 15:12:40 UTC CVEs named by MicrosoftCVE-2026-65810, CVE-2026-62872, CVE-2026-62886, CVE-2026-62897, CVE-2026-70354, CVE-2026-62902
  17. 19 Oct 2026 · 15:12:40 UTC Related KBsKB5126147
  18. 19 Oct 2026 · 15:12:40 UTC Applies toMicrosoft .NET Framework 3.5 on Windows Server 2012, Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation) → Windows Server 2012
  19. 19 Oct 2026 · 15:12:40 UTC Source coverage: windows-known-issuesCurrent → Not collected
  20. 19 Oct 2026 · 15:12:40 UTC Source coverage: dotnet-framework-updatesIncomplete
  21. 19 Oct 2026 · 15:12:40 UTC Link: CVE-2026-62902/security/cve/CVE-2026-62902
  22. 19 Oct 2026 · 15:12:40 UTC Link: CVE-2026-62897/security/cve/CVE-2026-62897
  23. 19 Oct 2026 · 15:12:40 UTC Link: KB5126147/windows/kb/KB5126147
  24. 19 Oct 2026 · 15:12:40 UTC Link: Support articlehttps://support.microsoft.com/help/5120716 → https://support.microsoft.com/en-us/servicing/dotnetframework/2026/08/august-11-2026-security-and-quality-rollup-for-net-framework-3-5-for-windows-server-2012-kb5120716
  25. 19 Oct 2026 · 15:12:40 UTC SourceMicrosoft release information, MSRC and Windows release health → Microsoft Learn and Support
  26. 19 Oct 2026 · 15:12:40 UTC KindWindows update → .NET Framework update
  27. 19 Oct 2026 · 15:12:40 UTC SummarySecurity update fixing 3 collected CVEs. → September 8, 2026-Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 (KB5120716)
  28. 16 Oct 2026 · 15:49:54 UTC CVEs listed directly for this KBCVE-2026-62872, CVE-2026-62886, CVE-2026-65810, CVE-2026-70354 → CVE-2026-62872, CVE-2026-65810, CVE-2026-70354
  29. 16 Oct 2026 · 15:49:54 UTC CVEs fixedCVE-2026-62872, CVE-2026-62886, CVE-2026-65810, CVE-2026-70354 → CVE-2026-62872, CVE-2026-65810, CVE-2026-70354
  30. 16 Oct 2026 · 15:49:54 UTC SummarySecurity update fixing 4 collected CVEs. → Security update fixing 3 collected CVEs.
  31. 14 Oct 2026 · 11:22:42 UTC Missing security releaseUnknown: security evidence is incomplete or retained → None identified in collected security coverage
  32. 14 Oct 2026 · 11:22:42 UTC Source coverage: msrc-cvrfIncomplete → Current
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 11 Nov 16:19 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.