Microsoft · Security update · October 13, 2026

KB5127685: October 2026 security update

KB5127685, released October 13, 2026, fixes 19 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent1 publicly disclosed
CVEs closed
19
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0144
73rd percentile

Priority of the 19 CVEs

Patch now 0 Urgent 1 High 18 Routine 0

Applies to

Product
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 1809
Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-96222 Active Directory Federation Services (AD FS) Spoofing 7.4 0.0059 Exploitation Less Likely
High CVE-2026-70035 .NET Framework Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2026-83520 .NET Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2026-58280 .NET Denial of Service 7.5 0.0125 Exploitation Less Likely
High CVE-2026-69651 .NET Denial of Service 7.5 0.0125 Exploitation Less Likely
High CVE-2026-96958 .NET Denial of Service 7.5 0.0120 Exploitation Less Likely
High CVE-2026-96960 .NET Denial of Service 7.5 0.0120 Exploitation Less Likely
High CVE-2026-84008 .NET Denial of Service 7.5 0.0099 Exploitation Less Likely
High CVE-2026-96233 ASP.NET Core Denial of Service 7.5 0.0099 Exploitation Unlikely
High CVE-2026-96959 .NET Denial of Service 7.5 0.0097 Exploitation Less Likely
High CVE-2026-70174 .NET Remote Code Execution 8.8 0.0091 Exploitation Less Likely
High CVE-2026-97788 Active Directory Federation Services (AD FS) Information Disclosure 7.5 0.0088 Exploitation Less Likely
High CVE-2026-85363 .NET Framework Elevation of Privilege 8.8 0.0086 Exploitation Less Likely
High CVE-2026-102869 .NET and Visual Studio Elevation of Privilege 8.8 0.0084 Exploitation Less Likely
High CVE-2026-70007 .NET Framework Remote Code Execution 8.8 0.0080 Exploitation Less Likely
High CVE-2026-108398 .NET Framework Security Feature Bypass 8.8 0.0078 DisclosedExploitation Less Likely
High CVE-2026-96224 .NET Remote Code Execution 8.8 0.0076 Exploitation Less Likely
High CVE-2026-97801 .NET Framework Tampering 7.5 0.0073 Exploitation Less Likely
High CVE-2026-62886 .NET Elevation of Privilege 7.8 0.0047 Exploitation Less Likely
Showing 1 to 19 of 19 1