KB5130035
Security update fixing 27 CVEs
0Windows versions
27CVEs fixed · 1 critical
0Exploited or in CISA KEV
YesRestart required (per MSRC)
Windows release health lists no known issues from this update or the one it builds on, and none it resolves.
Security fixes
27 Microsoft CVEs · most urgent first| CVE | Vulnerability | Severity | CVSS | Impact | Status |
|---|---|---|---|---|---|
| CVE-2026-105016 | Microsoft QUIC Remote Code Execution VulnerabilityMicrosoft QUIC | Critical | 9.8 | RCENetwork | |
| CVE-2026-88092 | ASP.NET Core Tampering VulnerabilityASP.NET Core | Important | 9.4 | TamperingNetwork | |
| CVE-2026-70188 | ASP.NET Core Security Feature Bypass VulnerabilityASP.NET Core | Important | 9.1 | SFBNetwork | |
| CVE-2026-70007 | .NET Framework Remote Code Execution Vulnerability.NET Framework | Important | 8.8 | RCENetwork | |
| CVE-2026-70035 | .NET Framework Remote Code Execution Vulnerability.NET Framework | Important | 8.8 | RCENetwork | |
| CVE-2026-70174 | .NET Remote Code Execution Vulnerability.NET | Important | 8.8 | RCENetwork | |
| CVE-2026-83520 | .NET Remote Code Execution Vulnerability.NET | Important | 8.8 | RCENetwork | |
| CVE-2026-85363 | .NET Framework Elevation of Privilege Vulnerability.NET Framework | Important | 8.8 | EoPNetwork | |
| CVE-2026-96224 | .NET Remote Code Execution Vulnerability.NET | Important | 8.8 | RCENetwork | |
| CVE-2026-96235 | .NET Remote Code Execution Vulnerability.NET | Important | 8.8 | RCENetwork |
Showing the 10 most urgent of 27All 27 CVEs
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.