# KB5130035: October 2026 security update KB5130035, released October 13, 2026, fixes 32 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/microsoft/kb5130035 - Platform: Microsoft - Released: Oct 13, 2026 - Priority: Urgent (Closes CVE-2026-105016, rated Critical) - CVEs: 32, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://support.microsoft.com/help/5130035 ## Applies to | Product | Release | Fixed in | |---|---|---| | [.NET 9.0 runtime installed on Linux](https://patchblox.com/security/data/product/microsoft/net-9.0-runtime-installed-on-linux.md) | | | | [.NET 9.0 runtime installed on Mac OS](https://patchblox.com/security/data/product/microsoft/net-9.0-runtime-installed-on-mac-os.md) | | | | [.NET 9.0 runtime installed on Windows](https://patchblox.com/security/data/product/microsoft/net-9.0-runtime-installed-on-windows.md) | | | | [ASP.NET Core 9.0](https://patchblox.com/security/data/product/microsoft/asp.net-core-9.0.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-105016](https://patchblox.com/security/data/cve/CVE-2026-105016.md) | Urgent | Microsoft QUIC | 9.8 | 0.0166 | | | [CVE-2026-70035](https://patchblox.com/security/data/cve/CVE-2026-70035.md) | High | .NET Framework | 8.8 | 0.0144 | | | [CVE-2026-83520](https://patchblox.com/security/data/cve/CVE-2026-83520.md) | High | .NET | 8.8 | 0.0144 | | | [CVE-2026-58280](https://patchblox.com/security/data/cve/CVE-2026-58280.md) | High | .NET | 9.4 | 0.0125 | | | [CVE-2026-69651](https://patchblox.com/security/data/cve/CVE-2026-69651.md) | High | .NET | 9.4 | 0.0125 | | | [CVE-2026-70181](https://patchblox.com/security/data/cve/CVE-2026-70181.md) | High | ASP.NET Core | 9.4 | 0.0123 | | | [CVE-2026-96236](https://patchblox.com/security/data/cve/CVE-2026-96236.md) | High | ASP.NET Core | 9.4 | 0.0109 | | | [CVE-2026-96233](https://patchblox.com/security/data/cve/CVE-2026-96233.md) | High | ASP.NET Core | 9.4 | 0.0099 | | | [CVE-2026-70186](https://patchblox.com/security/data/cve/CVE-2026-70186.md) | High | ASP.NET Core | 9.4 | 0.0096 | | | [CVE-2026-70188](https://patchblox.com/security/data/cve/CVE-2026-70188.md) | High | ASP.NET Core | 9.4 | 0.0094 | | | [CVE-2026-88092](https://patchblox.com/security/data/cve/CVE-2026-88092.md) | High | ASP.NET Core | 9.4 | 0.0093 | | | [CVE-2026-70174](https://patchblox.com/security/data/cve/CVE-2026-70174.md) | High | .NET | 8.8 | 0.0091 | | | [CVE-2026-70196](https://patchblox.com/security/data/cve/CVE-2026-70196.md) | High | ASP.NET Core | 9.4 | 0.0091 | | | [CVE-2026-96232](https://patchblox.com/security/data/cve/CVE-2026-96232.md) | High | .NET | 7.5 | 0.0090 | | | [CVE-2026-85363](https://patchblox.com/security/data/cve/CVE-2026-85363.md) | High | .NET Framework | 8.8 | 0.0086 | | | [CVE-2026-96235](https://patchblox.com/security/data/cve/CVE-2026-96235.md) | High | .NET | 8.8 | 0.0086 | | | [CVE-2026-87697](https://patchblox.com/security/data/cve/CVE-2026-87697.md) | High | .NET | 8.8 | 0.0084 | | | [CVE-2026-70007](https://patchblox.com/security/data/cve/CVE-2026-70007.md) | High | .NET Framework | 8.8 | 0.0080 | | | [CVE-2026-70197](https://patchblox.com/security/data/cve/CVE-2026-70197.md) | High | .NET | 8.1 | 0.0079 | | | [CVE-2026-66822](https://patchblox.com/security/data/cve/CVE-2026-66822.md) | High | .NET | 9.4 | 0.0079 | | | [CVE-2026-96224](https://patchblox.com/security/data/cve/CVE-2026-96224.md) | High | .NET | 8.8 | 0.0076 | | | [CVE-2026-70175](https://patchblox.com/security/data/cve/CVE-2026-70175.md) | High | ASP.NET Core | 9.4 | 0.0073 | | | [CVE-2026-96237](https://patchblox.com/security/data/cve/CVE-2026-96237.md) | High | .NET | 9.4 | 0.0064 | | | [CVE-2026-70183](https://patchblox.com/security/data/cve/CVE-2026-70183.md) | High | ASP.NET Core | 9.4 | 0.0053 | | | [CVE-2026-70161](https://patchblox.com/security/data/cve/CVE-2026-70161.md) | High | .NET | 7.3 | 0.0049 | | | [CVE-2026-70190](https://patchblox.com/security/data/cve/CVE-2026-70190.md) | High | .NET | 7.3 | 0.0049 | | | [CVE-2026-96225](https://patchblox.com/security/data/cve/CVE-2026-96225.md) | High | .NET | 9.4 | 0.0041 | | | [CVE-2026-96231](https://patchblox.com/security/data/cve/CVE-2026-96231.md) | High | .NET | 9.4 | 0.0041 | | | [CVE-2026-96238](https://patchblox.com/security/data/cve/CVE-2026-96238.md) | High | .NET | 9.4 | 0.0030 | | | [CVE-2026-96229](https://patchblox.com/security/data/cve/CVE-2026-96229.md) | Routine | .NET | 6.5 | 0.0095 | | | [CVE-2026-70165](https://patchblox.com/security/data/cve/CVE-2026-70165.md) | Routine | .NET | 6.7 | 0.0038 | | | [CVE-2026-96234](https://patchblox.com/security/data/cve/CVE-2026-96234.md) | Routine | .NET | 5.3 | 0.0033 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo