Microsoft · Security update · October 13, 2026

KB5127668: October 2026 security update

KB5127668, released October 13, 2026, fixes 18 CVEs in Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent1 publicly disclosed
CVEs closed
18
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0144
73rd percentile

Priority of the 18 CVEs

Patch now 0 Urgent 1 High 17 Routine 0

Applies to

Product
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-96222 Active Directory Federation Services (AD FS) Spoofing 9.4 0.0059 Exploitation Less Likely
High CVE-2026-70035 .NET Framework Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2026-83520 .NET Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2026-58280 .NET Denial of Service 9.4 0.0125 Exploitation Less Likely
High CVE-2026-69651 .NET Denial of Service 9.4 0.0125 Exploitation Less Likely
High CVE-2026-96958 .NET Denial of Service 7.5 0.0120 Exploitation Less Likely
High CVE-2026-96960 .NET Denial of Service 7.5 0.0120 Exploitation Less Likely
High CVE-2026-96233 ASP.NET Core Denial of Service 9.4 0.0099 Exploitation Unlikely
High CVE-2026-84008 .NET Denial of Service 7.5 0.0099 Exploitation Less Likely
High CVE-2026-96959 .NET Denial of Service 7.5 0.0097 Exploitation Less Likely
High CVE-2026-70174 .NET Remote Code Execution 8.8 0.0091 Exploitation Less Likely
High CVE-2026-97788 Active Directory Federation Services (AD FS) Information Disclosure 7.5 0.0088 Exploitation Less Likely
High CVE-2026-85363 .NET Framework Elevation of Privilege 8.8 0.0086 Exploitation Less Likely
High CVE-2026-102869 .NET and Visual Studio Elevation of Privilege 8.8 0.0084 Exploitation Less Likely
High CVE-2026-70007 .NET Framework Remote Code Execution 8.8 0.0080 Exploitation Less Likely
High CVE-2026-108398 .NET Framework Security Feature Bypass 8.8 0.0078 DisclosedExploitation Less Likely
High CVE-2026-96224 .NET Remote Code Execution 8.8 0.0076 Exploitation Less Likely
High CVE-2026-97801 .NET Framework Tampering 7.5 0.0073 Exploitation Less Likely
Showing 1 to 18 of 18 1