# KB5127694: October 2026 security update

KB5127694, released October 13, 2026, fixes 19 CVEs in Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H2. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/microsoft/kb5127694
- Platform: Microsoft
- Released: Oct 13, 2026
- Priority: Urgent (Closes CVE-2026-96222, rated Critical)
- CVEs: 19, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://support.microsoft.com/help/5127694

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H2](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-and-4.8.1-on-windows-11-version-26h2.md) |  |  |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-96222](https://patchblox.com/security/data/cve/CVE-2026-96222.md) | Urgent | Active Directory Federation Services (AD FS) | 9.4 | 0.0059 |  |
| [CVE-2026-70035](https://patchblox.com/security/data/cve/CVE-2026-70035.md) | High | .NET Framework | 8.8 | 0.0144 |  |
| [CVE-2026-83520](https://patchblox.com/security/data/cve/CVE-2026-83520.md) | High | .NET | 8.8 | 0.0144 |  |
| [CVE-2026-58280](https://patchblox.com/security/data/cve/CVE-2026-58280.md) | High | .NET | 9.4 | 0.0125 |  |
| [CVE-2026-69651](https://patchblox.com/security/data/cve/CVE-2026-69651.md) | High | .NET | 9.4 | 0.0125 |  |
| [CVE-2026-96958](https://patchblox.com/security/data/cve/CVE-2026-96958.md) | High | .NET | 7.5 | 0.0120 |  |
| [CVE-2026-96960](https://patchblox.com/security/data/cve/CVE-2026-96960.md) | High | .NET | 7.5 | 0.0120 |  |
| [CVE-2026-96233](https://patchblox.com/security/data/cve/CVE-2026-96233.md) | High | ASP.NET Core | 9.4 | 0.0099 |  |
| [CVE-2026-84008](https://patchblox.com/security/data/cve/CVE-2026-84008.md) | High | .NET | 7.5 | 0.0099 |  |
| [CVE-2026-96959](https://patchblox.com/security/data/cve/CVE-2026-96959.md) | High | .NET | 7.5 | 0.0097 |  |
| [CVE-2026-70174](https://patchblox.com/security/data/cve/CVE-2026-70174.md) | High | .NET | 8.8 | 0.0091 |  |
| [CVE-2026-97788](https://patchblox.com/security/data/cve/CVE-2026-97788.md) | High | Active Directory Federation Services (AD FS) | 7.5 | 0.0088 |  |
| [CVE-2026-85363](https://patchblox.com/security/data/cve/CVE-2026-85363.md) | High | .NET Framework | 8.8 | 0.0086 |  |
| [CVE-2026-102869](https://patchblox.com/security/data/cve/CVE-2026-102869.md) | High | .NET and Visual Studio | 8.8 | 0.0084 |  |
| [CVE-2026-70007](https://patchblox.com/security/data/cve/CVE-2026-70007.md) | High | .NET Framework | 8.8 | 0.0080 |  |
| [CVE-2026-108398](https://patchblox.com/security/data/cve/CVE-2026-108398.md) | High | .NET Framework | 8.8 | 0.0078 | Disclosed |
| [CVE-2026-96224](https://patchblox.com/security/data/cve/CVE-2026-96224.md) | High | .NET | 8.8 | 0.0076 |  |
| [CVE-2026-97801](https://patchblox.com/security/data/cve/CVE-2026-97801.md) | High | .NET Framework | 7.5 | 0.0073 |  |
| [CVE-2026-62886](https://patchblox.com/security/data/cve/CVE-2026-62886.md) | High | .NET | 7.8 | 0.0047 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo