# KB5127693: October 2026 security update

KB5127693, released October 13, 2026, fixes 19 CVEs in Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/microsoft/kb5127693
- Platform: Microsoft
- Released: Oct 13, 2026
- Priority: Urgent (Closes CVE-2026-96222, rated Critical)
- CVEs: 19, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://support.microsoft.com/help/5127693

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-and-4.8.1-on-windows-server-2022.md) |  |  |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-96222](https://patchblox.com/security/data/cve/CVE-2026-96222.md) | Urgent | Active Directory Federation Services (AD FS) | 9.4 | 0.0059 |  |
| [CVE-2026-70035](https://patchblox.com/security/data/cve/CVE-2026-70035.md) | High | .NET Framework | 8.8 | 0.0144 |  |
| [CVE-2026-83520](https://patchblox.com/security/data/cve/CVE-2026-83520.md) | High | .NET | 8.8 | 0.0144 |  |
| [CVE-2026-58280](https://patchblox.com/security/data/cve/CVE-2026-58280.md) | High | .NET | 9.4 | 0.0125 |  |
| [CVE-2026-69651](https://patchblox.com/security/data/cve/CVE-2026-69651.md) | High | .NET | 9.4 | 0.0125 |  |
| [CVE-2026-96958](https://patchblox.com/security/data/cve/CVE-2026-96958.md) | High | .NET | 7.5 | 0.0120 |  |
| [CVE-2026-96960](https://patchblox.com/security/data/cve/CVE-2026-96960.md) | High | .NET | 7.5 | 0.0120 |  |
| [CVE-2026-96233](https://patchblox.com/security/data/cve/CVE-2026-96233.md) | High | ASP.NET Core | 9.4 | 0.0099 |  |
| [CVE-2026-84008](https://patchblox.com/security/data/cve/CVE-2026-84008.md) | High | .NET | 7.5 | 0.0099 |  |
| [CVE-2026-96959](https://patchblox.com/security/data/cve/CVE-2026-96959.md) | High | .NET | 7.5 | 0.0097 |  |
| [CVE-2026-70174](https://patchblox.com/security/data/cve/CVE-2026-70174.md) | High | .NET | 8.8 | 0.0091 |  |
| [CVE-2026-97788](https://patchblox.com/security/data/cve/CVE-2026-97788.md) | High | Active Directory Federation Services (AD FS) | 7.5 | 0.0088 |  |
| [CVE-2026-85363](https://patchblox.com/security/data/cve/CVE-2026-85363.md) | High | .NET Framework | 8.8 | 0.0086 |  |
| [CVE-2026-102869](https://patchblox.com/security/data/cve/CVE-2026-102869.md) | High | .NET and Visual Studio | 8.8 | 0.0084 |  |
| [CVE-2026-70007](https://patchblox.com/security/data/cve/CVE-2026-70007.md) | High | .NET Framework | 8.8 | 0.0080 |  |
| [CVE-2026-108398](https://patchblox.com/security/data/cve/CVE-2026-108398.md) | High | .NET Framework | 8.8 | 0.0078 | Disclosed |
| [CVE-2026-96224](https://patchblox.com/security/data/cve/CVE-2026-96224.md) | High | .NET | 8.8 | 0.0076 |  |
| [CVE-2026-97801](https://patchblox.com/security/data/cve/CVE-2026-97801.md) | High | .NET Framework | 7.5 | 0.0073 |  |
| [CVE-2026-62886](https://patchblox.com/security/data/cve/CVE-2026-62886.md) | High | .NET | 7.8 | 0.0047 |  |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo