Microsoft · Security update · October 13, 2026

KB5130036: October 2026 security update

KB5130036, released October 13, 2026, fixes 32 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
32
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0144
73rd percentile

Priority of the 32 CVEs

Patch now 0 Urgent 0 High 26 Routine 6

Applies to

Product
.NET 10.0 runtime installed on Linux
.NET 10.0 runtime installed on Mac OS
.NET 10.0 runtime installed on Windows
ASP.NET Core 10.0

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2026-70035 .NET Framework Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2026-83520 .NET Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2026-58280 .NET Denial of Service 7.5 0.0125 Exploitation Less Likely
High CVE-2026-69651 .NET Denial of Service 7.5 0.0125 Exploitation Less Likely
High CVE-2026-70181 ASP.NET Core Denial of Service 7.5 0.0123 Exploitation Less Likely
High CVE-2026-96236 ASP.NET Core Denial of Service 7.5 0.0109 Exploitation Less Likely
High CVE-2026-96233 ASP.NET Core Denial of Service 7.5 0.0099 Exploitation Unlikely
High CVE-2026-70186 ASP.NET Core Denial of Service 7.5 0.0096 Exploitation Less Likely
High CVE-2026-70188 ASP.NET Core Security Feature Bypass 9.1 0.0094 Exploitation Less Likely
High CVE-2026-88092 ASP.NET Core Tampering 9.4 0.0093 Exploitation Less Likely
High CVE-2026-70174 .NET Remote Code Execution 8.8 0.0091 Exploitation Less Likely
High CVE-2026-96232 .NET Information Disclosure 7.5 0.0090 Exploitation Less Likely
High CVE-2026-85363 .NET Framework Elevation of Privilege 8.8 0.0086 Exploitation Less Likely
High CVE-2026-96235 .NET Remote Code Execution 8.8 0.0086 Exploitation Less Likely
High CVE-2026-87697 .NET Remote Code Execution 8.8 0.0084 Exploitation Less Likely
High CVE-2026-70007 .NET Framework Remote Code Execution 8.8 0.0080 Exploitation Less Likely
High CVE-2026-70197 .NET Remote Code Execution 8.1 0.0079 Exploitation Less Likely
High CVE-2026-96224 .NET Remote Code Execution 8.8 0.0076 Exploitation Less Likely
High CVE-2026-70175 ASP.NET Core Elevation of Privilege 8.1 0.0073 Exploitation Less Likely
High CVE-2026-96237 .NET Remote Code Execution 7.5 0.0064 Exploitation Less Likely
High CVE-2026-96957 .NET Security Feature Bypass 8.8 0.0053 Exploitation Less Likely
High CVE-2026-70183 ASP.NET Core Elevation of Privilege 7.5 0.0053 Exploitation Less Likely
High CVE-2026-70161 .NET Elevation of Privilege 7.3 0.0049 Exploitation Less Likely
High CVE-2026-70190 .NET Elevation of Privilege 7.3 0.0049 Exploitation Less Likely
High CVE-2026-96225 .NET Elevation of Privilege 7.8 0.0041 Exploitation Less Likely
Showing 1 to 25 of 32 1Next