KB5130036: what it fixes and who gets it
KB5130036 is a security update from Microsoft's October 2026 release for .NET 10.0 installed on Linux, .NET 10.0 installed on Mac OS, .NET 10.0 installed on Windows and other products.
Microsoft data read
Should you install it?
Yes. It is a routine security update; none of its fixes are rated Critical or reported as exploited. Windows Update installs it automatically on supported home PCs.
If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.
Security fixes in KB5130036
| CVE | Type | CVSS | Severity |
|---|---|---|---|
| CVE-2026-88092ASP.NET Core Tampering Vulnerability | Tampering | 9.4 | Important |
| CVE-2026-70188ASP.NET Core Security Feature Bypass Vulnerability | Security Feature Bypass | 9.1 | Important |
| CVE-2026-70007.NET Framework Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
| CVE-2026-70035.NET Framework Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
| CVE-2026-70174.NET Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
| CVE-2026-83520.NET Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
| CVE-2026-85363.NET Framework Elevation of Privilege Vulnerability | Elevation of Privilege | 8.8 | Important |
| CVE-2026-87697.NET Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
| CVE-2026-96224.NET Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
| CVE-2026-96235.NET Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
| CVE-2026-96957.NET Security Feature Bypass Vulnerability | Security Feature Bypass | 8.8 | Important |
| CVE-2026-70175ASP.NET Core Elevation of Privilege Vulnerability | Elevation of Privilege | 8.1 | Important |
| CVE-2026-70197.NET Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Important |
| CVE-2026-96225.NET Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-96231.NET Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-58280.NET Denial of Service Vulnerability | Denial of Service | 7.5 | Important |
| CVE-2026-69651.NET Denial of Service Vulnerability | Denial of Service | 7.5 | Important |
| CVE-2026-70183ASP.NET Core Elevation of Privilege Vulnerability | Elevation of Privilege | 7.5 | Important |
| CVE-2026-70186ASP.NET Core Denial of Service Vulnerability | Denial of Service | 7.5 | Important |
| CVE-2026-96232.NET Information Disclosure Vulnerability | Information Disclosure | 7.5 | Important |
| CVE-2026-96233ASP.NET Core Denial of Service Vulnerability | Denial of Service | 7.5 | Important |
| CVE-2026-96236ASP.NET Core Denial of Service Vulnerability | Denial of Service | 7.5 | Important |
| CVE-2026-96237.NET Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Important |
| CVE-2026-70161.NET Elevation of Privilege Vulnerability | Elevation of Privilege | 7.3 | Important |
| CVE-2026-70190.NET Elevation of Privilege Vulnerability | Elevation of Privilege | 7.3 | Important |
| CVE-2026-70165.NET Elevation of Privilege Vulnerability | Elevation of Privilege | 6.7 | Important |
| CVE-2026-96229.NET Information Disclosure Vulnerability | Information Disclosure | 6.5 | Important |
| CVE-2026-96238.NET Security Feature Bypass Vulnerability | Security Feature Bypass | 6.5 | Important |
| CVE-2026-66822.NET Information Disclosure Vulnerability | Information Disclosure | 5.9 | Important |
| CVE-2026-70196ASP.NET Core Denial of Service Vulnerability | Denial of Service | 5.9 | Important |
| CVE-2026-96234.NET Information Disclosure Vulnerability | Information Disclosure | 5.3 | Important |
Questions and experiences
Ask about this page: members and our editors answer. Reading is open; writing needs a free account.
0 comments
…