Microsoft · Security update · October 13, 2026

KB5130034: October 2026 security update

KB5130034, released October 13, 2026, fixes 29 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
29
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0166
76th percentile

Priority of the 29 CVEs

Patch now 0 Urgent 1 High 26 Routine 2

Applies to

Product
.NET 8.0 runtime installed on Linux
.NET 8.0 runtime installed on Mac OS
.NET 8.0 runtime installed on Windows
ASP.NET Core 8.0

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-105016 Microsoft QUIC Remote Code Execution 9.8 0.0166 Exploitation Less Likely
High CVE-2026-70035 .NET Framework Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2026-83520 .NET Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2026-58280 .NET Denial of Service 9.4 0.0125 Exploitation Less Likely
High CVE-2026-69651 .NET Denial of Service 9.4 0.0125 Exploitation Less Likely
High CVE-2026-70181 ASP.NET Core Denial of Service 9.4 0.0123 Exploitation Less Likely
High CVE-2026-96236 ASP.NET Core Denial of Service 9.4 0.0109 Exploitation Less Likely
High CVE-2026-96233 ASP.NET Core Denial of Service 9.4 0.0099 Exploitation Unlikely
High CVE-2026-70186 ASP.NET Core Denial of Service 9.4 0.0096 Exploitation Less Likely
High CVE-2026-70188 ASP.NET Core Security Feature Bypass 9.4 0.0094 Exploitation Less Likely
High CVE-2026-88092 ASP.NET Core Tampering 9.4 0.0093 Exploitation Less Likely
High CVE-2026-70174 .NET Remote Code Execution 8.8 0.0091 Exploitation Less Likely
High CVE-2026-70196 ASP.NET Core Denial of Service 9.4 0.0091 Exploitation Less Likely
High CVE-2026-96232 .NET Information Disclosure 7.5 0.0090 Exploitation Less Likely
High CVE-2026-85363 .NET Framework Elevation of Privilege 8.8 0.0086 Exploitation Less Likely
High CVE-2026-96235 .NET Remote Code Execution 8.8 0.0086 Exploitation Less Likely
High CVE-2026-87697 .NET Remote Code Execution 8.8 0.0084 Exploitation Less Likely
High CVE-2026-70007 .NET Framework Remote Code Execution 8.8 0.0080 Exploitation Less Likely
High CVE-2026-70197 .NET Remote Code Execution 8.1 0.0079 Exploitation Less Likely
High CVE-2026-66822 .NET Information Disclosure 9.4 0.0079 Exploitation Less Likely
High CVE-2026-96224 .NET Remote Code Execution 8.8 0.0076 Exploitation Less Likely
High CVE-2026-70175 ASP.NET Core Elevation of Privilege 9.4 0.0073 Exploitation Less Likely
High CVE-2026-96237 .NET Remote Code Execution 9.4 0.0064 Exploitation Less Likely
High CVE-2026-70183 ASP.NET Core Elevation of Privilege 9.4 0.0053 Exploitation Less Likely
High CVE-2026-96225 .NET Elevation of Privilege 9.4 0.0041 Exploitation Less Likely
Showing 1 to 25 of 29 1Next