Microsoft · Security update · October 13, 2026

KB5127691: October 2026 security update

KB5127691, released October 13, 2026, fixes 18 CVEs in Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent1 publicly disclosed
CVEs closed
18
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0144
73rd percentile

Priority of the 18 CVEs

Patch now 0 Urgent 1 High 17 Routine 0

Applies to

Product
Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-96222 Active Directory Federation Services (AD FS) Spoofing 9.4 0.0059 Exploitation Less Likely
High CVE-2026-70035 .NET Framework Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2026-83520 .NET Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2026-58280 .NET Denial of Service 9.4 0.0125 Exploitation Less Likely
High CVE-2026-69651 .NET Denial of Service 9.4 0.0125 Exploitation Less Likely
High CVE-2026-96958 .NET Denial of Service 7.5 0.0120 Exploitation Less Likely
High CVE-2026-96960 .NET Denial of Service 7.5 0.0120 Exploitation Less Likely
High CVE-2026-96233 ASP.NET Core Denial of Service 9.4 0.0099 Exploitation Unlikely
High CVE-2026-84008 .NET Denial of Service 7.5 0.0099 Exploitation Less Likely
High CVE-2026-96959 .NET Denial of Service 7.5 0.0097 Exploitation Less Likely
High CVE-2026-70174 .NET Remote Code Execution 8.8 0.0091 Exploitation Less Likely
High CVE-2026-97788 Active Directory Federation Services (AD FS) Information Disclosure 7.5 0.0088 Exploitation Less Likely
High CVE-2026-85363 .NET Framework Elevation of Privilege 8.8 0.0086 Exploitation Less Likely
High CVE-2026-102869 .NET and Visual Studio Elevation of Privilege 8.8 0.0084 Exploitation Less Likely
High CVE-2026-70007 .NET Framework Remote Code Execution 8.8 0.0080 Exploitation Less Likely
High CVE-2026-108398 .NET Framework Security Feature Bypass 8.8 0.0078 DisclosedExploitation Less Likely
High CVE-2026-96224 .NET Remote Code Execution 8.8 0.0076 Exploitation Less Likely
High CVE-2026-97801 .NET Framework Tampering 7.5 0.0073 Exploitation Less Likely
Showing 1 to 18 of 18 1