KB5130036
Security update fixing 30 CVEs
0Windows versions
30CVEs fixed · 0 critical
0Exploited or in CISA KEV
Windows release health lists no known issues from this update or the one it builds on, and none it resolves.
Security fixes
30 Microsoft CVEs · most urgent first| CVE | Vulnerability | Severity | CVSS | Impact | Status |
|---|---|---|---|---|---|
| CVE-2026-88092 | ASP.NET Core Tampering VulnerabilityASP.NET Core | Important | 9.4 | TamperingNetwork | |
| CVE-2026-70188 | ASP.NET Core Security Feature Bypass VulnerabilityASP.NET Core | Important | 9.1 | SFBNetwork | |
| CVE-2026-70007 | .NET Framework Remote Code Execution Vulnerability.NET Framework | Important | 8.8 | RCENetwork | |
| CVE-2026-70035 | .NET Framework Remote Code Execution Vulnerability.NET Framework | Important | 8.8 | RCENetwork | |
| CVE-2026-70174 | .NET Remote Code Execution Vulnerability.NET | Important | 8.8 | RCENetwork | |
| CVE-2026-83520 | .NET Remote Code Execution Vulnerability.NET | Important | 8.8 | RCENetwork | |
| CVE-2026-85363 | .NET Framework Elevation of Privilege Vulnerability.NET Framework | Important | 8.8 | EoPNetwork | |
| CVE-2026-96224 | .NET Remote Code Execution Vulnerability.NET | Important | 8.8 | RCENetwork | |
| CVE-2026-96235 | .NET Remote Code Execution Vulnerability.NET | Important | 8.8 | RCENetwork | |
| CVE-2026-96957 | .NET Security Feature Bypass Vulnerability.NET | Important | 8.8 | SFBNetwork |
Showing the 10 most urgent of 30All 30 CVEs
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.