KB5127666

Security update fixing 18 CVEs

Support article Update Catalog CVEs in Security CVE list for a ticket

0Windows versions

18CVEs fixed · 1 critical

0Exploited or in CISA KEV

Windows release health lists no known issues from this update or the one it builds on, and none it resolves.

Security fixes

18 Microsoft CVEs · most urgent first

CVE	Vulnerability	Severity	CVSS	Impact	Status
CVE-2026-108398	.NET Framework Security Feature Bypass Vulnerability.NET Framework	Important	8.8	SFBLocal	Disclosed
CVE-2026-96222	Active Directory Federation Services (AD FS) Spoofing VulnerabilityActive Directory Federation Services (AD FS)	Critical	7.4	SpoofingNetwork
CVE-2026-102869	.NET and Visual Studio Elevation of Privilege Vulnerability.NET and Visual Studio	Important	8.8	EoPNetwork
CVE-2026-70007	.NET Framework Remote Code Execution Vulnerability.NET Framework	Important	8.8	RCENetwork
CVE-2026-70035	.NET Framework Remote Code Execution Vulnerability.NET Framework	Important	8.8	RCENetwork
CVE-2026-70174	.NET Remote Code Execution Vulnerability.NET	Important	8.8	RCENetwork
CVE-2026-83520	.NET Remote Code Execution Vulnerability.NET	Important	8.8	RCENetwork
CVE-2026-85363	.NET Framework Elevation of Privilege Vulnerability.NET Framework	Important	8.8	EoPNetwork
CVE-2026-96224	.NET Remote Code Execution Vulnerability.NET	Important	8.8	RCENetwork
CVE-2026-58280	.NET Denial of Service Vulnerability.NET	Important	7.5	DoSNetwork

Showing the 10 most urgent of 18All 18 CVEs

What changed

First observed 14 Oct 2026

No field changes in the recorded history.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.