Microsoft · Security update · July 14, 2026

KB5104034: July 2026 security update

KB5104034, released July 14, 2026, fixes 14 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
14
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0123
69th percentile

Priority of the 14 CVEs

Patch now 0 Urgent 0 High 13 Routine 1

Applies to

Product
.NET 10.0 runtime installed on Linux
.NET 10.0 runtime installed on Mac OS
.NET 10.0 runtime installed on Windows

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2026-50524 .NET Framework Denial of Service 7.5 0.0123 Exploitation Less Likely
High CVE-2026-47302 .NET Denial of Service 7.5 0.0117 Exploitation Less Likely
High CVE-2026-50525 .NET Denial of Service 7.5 0.0117 Exploitation Less Likely
High CVE-2026-50527 .NET Framework Denial of Service 7.5 0.0117 Exploitation Less Likely
High CVE-2026-50648 .NET Framework Denial of Service 7.5 0.0117 Exploitation Less Likely
High CVE-2026-50651 .NET Denial of Service 7.5 0.0117 Exploitation Less Likely
High CVE-2026-56170 ASP.NET Core Denial of Service 7.5 0.0117 Exploitation Less Likely
High CVE-2026-57108 .NET Core Denial of Service 7.5 0.0117 Exploitation Less Likely
High CVE-2026-47303 ASP.NET Core Elevation of Privilege 8.8 0.0084 Exploitation Less Likely
High CVE-2026-47300 ASP.NET Core Elevation of Privilege 8.8 0.0078 Exploitation Less Likely
High CVE-2026-50528 .NET Security Feature Bypass 8.2 0.0061 Exploitation Less Likely
High CVE-2026-47304 .NET Security Feature Bypass 9.8 0.0029 Exploitation Less Likely
High CVE-2026-50526 .NET Tampering 7.0 0.0022 Exploitation Less Likely
Routine CVE-2026-50659 .NET Spoofing 6.5 0.0074 Exploitation Less Likely
Showing 1 to 14 of 14 1