KB5133965
Security update fixing 2 CVEs
2CVEs fixed · 0 critical
0Exploited or in CISA KEV
YesRestart required (per MSRC)
Windows release health lists no known issues from this update or the one it builds on, and none it resolves.
Security fixes
2 Microsoft CVEs · most urgent first| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status |
|---|---|---|---|---|---|---|
| CVE-2026-70197 | .NET and Visual Studio Remote Code Execution Vulnerability.NET | Important | 8.1 | 0.8% | RCENetwork | Revised 25 Oct |
| CVE-2026-114148 | ASP.NET Core Elevation of Privilege VulnerabilityASP.NET Core | Important | — | — | EoP |
What changed
First observed 25 Oct 2026- 25 Oct 2026 · 19:05:13 UTC Applies to.NET 9.0 installed on Linux, .NET 9.0 installed on Mac OS, .NET 9.0 installed on Windows, Microsoft Edge (Chromium-based) → .NET 9.0 installed on Linux, .NET 9.0 installed on Mac OS, .NET 9.0 installed on Windows, ASP.NET Core runtime and targeting-pack Linux tarballs (Microsoft-published)
The most recent 100 field changes are listed. Complete recorded revisions are kept separately.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.