{
  "fix": "Microsoft .NET Windows Desktop Runtime 9.0 9.0.21",
  "url": "https://patchblox.com/security/fix/windows-app/microsoft.dotnet.desktopruntime.9-9.0.21",
  "summary": "Microsoft .NET Windows Desktop Runtime 9.0 9.0.21, released October 5, 2026, fixes 22 CVEs in Microsoft .NET Windows Desktop Runtime 9.0. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft .NET Windows Desktop Runtime 9.0 is 9.0.22, which also fixes every one of these CVEs.",
  "platform": "windows-app",
  "type": "app-version",
  "title": "Microsoft .NET Windows Desktop Runtime 9.0 9.0.21",
  "released": "2026-10-05T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-105016, rated Critical",
  "supported": true,
  "cveCount": 22,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.01658,
  "maxCvss": 9.8,
  "appliesTo": [
    {
      "product": "Microsoft .NET Windows Desktop Runtime 9.0",
      "productUrl": "https://patchblox.com/security/product/windows-app/microsoft-.net-windows-desktop-runtime-9.0",
      "fixedVersion": "9.0.21",
      "latestVersion": "9.0.22",
      "supported": true
    }
  ],
  "supersededBy": {
    "product": "Microsoft .NET Windows Desktop Runtime 9.0",
    "latestVersion": "9.0.22",
    "productUrl": "https://patchblox.com/security/product/windows-app/microsoft-.net-windows-desktop-runtime-9.0"
  },
  "cves": [
    {
      "cveId": "CVE-2026-105016",
      "url": "https://patchblox.com/security/cve/CVE-2026-105016",
      "title": "Microsoft QUIC Remote Code Execution Vulnerability",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.01658,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-70035",
      "url": "https://patchblox.com/security/cve/CVE-2026-70035",
      "title": ".NET Framework Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01435,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-83520",
      "url": "https://patchblox.com/security/cve/CVE-2026-83520",
      "title": ".NET Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01435,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-58280",
      "url": "https://patchblox.com/security/cve/CVE-2026-58280",
      "title": ".NET Denial of Service Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.4,
      "epss": 0.0125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-69651",
      "url": "https://patchblox.com/security/cve/CVE-2026-69651",
      "title": ".NET Denial of Service Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.4,
      "epss": 0.0125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96958",
      "url": "https://patchblox.com/security/cve/CVE-2026-96958",
      "title": ".NET Denial of Service Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96960",
      "url": "https://patchblox.com/security/cve/CVE-2026-96960",
      "title": ".NET Denial of Service Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96233",
      "url": "https://patchblox.com/security/cve/CVE-2026-96233",
      "title": "ASP.NET Core Denial of Service Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.4,
      "epss": 0.00991,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96959",
      "url": "https://patchblox.com/security/cve/CVE-2026-96959",
      "title": ".NET Denial of Service Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00969,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-70174",
      "url": "https://patchblox.com/security/cve/CVE-2026-70174",
      "title": ".NET Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00913,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96232",
      "url": "https://patchblox.com/security/cve/CVE-2026-96232",
      "title": ".NET Information Disclosure Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00895,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-85363",
      "url": "https://patchblox.com/security/cve/CVE-2026-85363",
      "title": ".NET Framework Elevation of Privilege Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00859,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96235",
      "url": "https://patchblox.com/security/cve/CVE-2026-96235",
      "title": ".NET Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00859,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-87697",
      "url": "https://patchblox.com/security/cve/CVE-2026-87697",
      "title": ".NET Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00843,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-70007",
      "url": "https://patchblox.com/security/cve/CVE-2026-70007",
      "title": ".NET Framework Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00801,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-70197",
      "url": "https://patchblox.com/security/cve/CVE-2026-70197",
      "title": ".NET and Visual Studio Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00788,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-66822",
      "url": "https://patchblox.com/security/cve/CVE-2026-66822",
      "title": ".NET Information Disclosure Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.4,
      "epss": 0.00785,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96224",
      "url": "https://patchblox.com/security/cve/CVE-2026-96224",
      "title": ".NET Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00759,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96225",
      "url": "https://patchblox.com/security/cve/CVE-2026-96225",
      "title": ".NET Elevation of Privilege Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.4,
      "epss": 0.00411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96231",
      "url": "https://patchblox.com/security/cve/CVE-2026-96231",
      "title": ".NET Elevation of Privilege Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.4,
      "epss": 0.00411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96229",
      "url": "https://patchblox.com/security/cve/CVE-2026-96229",
      "title": ".NET Information Disclosure Vulnerability",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.00949,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96234",
      "url": "https://patchblox.com/security/cve/CVE-2026-96234",
      "title": ".NET Information Disclosure Vulnerability",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.3,
      "epss": 0.00328,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}