KB5130034: what it fixes and who gets it

KB5130034 is a security update from Microsoft's October 2026 release for .NET 8.0 installed on Linux, .NET 8.0 installed on Mac OS, .NET 8.0 installed on Windows and other products.

Microsoft data read
28CVEs fixed
1rated Critical
0already exploited
Yesrestart required

Should you install it?

Yes. It closes holes Microsoft rates Critical, the most serious rating it uses. Windows Update installs it automatically on supported home PCs.

If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.

Security fixes in KB5130034

CVETypeCVSSSeverity
CVE-2026-105016Microsoft QUIC Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-88092ASP.NET Core Tampering VulnerabilityTampering9.4Important
CVE-2026-70188ASP.NET Core Security Feature Bypass VulnerabilitySecurity Feature Bypass9.1Important
CVE-2026-70007.NET Framework Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-70035.NET Framework Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-70174.NET Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-83520.NET Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-85363.NET Framework Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-87697.NET Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-96224.NET Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-96235.NET Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-70175ASP.NET Core Elevation of Privilege VulnerabilityElevation of Privilege8.1Important
CVE-2026-70197.NET Remote Code Execution VulnerabilityRemote Code Execution8.1Important
CVE-2026-96225.NET Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-96231.NET Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-58280.NET Denial of Service VulnerabilityDenial of Service7.5Important
CVE-2026-69651.NET Denial of Service VulnerabilityDenial of Service7.5Important
CVE-2026-70183ASP.NET Core Elevation of Privilege VulnerabilityElevation of Privilege7.5Important
CVE-2026-70186ASP.NET Core Denial of Service VulnerabilityDenial of Service7.5Important
CVE-2026-96232.NET Information Disclosure VulnerabilityInformation Disclosure7.5Important
CVE-2026-96233ASP.NET Core Denial of Service VulnerabilityDenial of Service7.5Important
CVE-2026-96236ASP.NET Core Denial of Service VulnerabilityDenial of Service7.5Important
CVE-2026-96237.NET Remote Code Execution VulnerabilityRemote Code Execution7.5Important
CVE-2026-96229.NET Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-96238.NET Security Feature Bypass VulnerabilitySecurity Feature Bypass6.5Important
CVE-2026-66822.NET Information Disclosure VulnerabilityInformation Disclosure5.9Important
CVE-2026-70196ASP.NET Core Denial of Service VulnerabilityDenial of Service5.9Important
CVE-2026-96234.NET Information Disclosure VulnerabilityInformation Disclosure5.3Important

Questions and experiences

Ask about this page: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

4,322 members already hereThey read, write, comment and vote. 0 verified · 31 joined this year