.NET 8.0 Update - October 25, 2026

.NET 8.0 Update - October 25, 2026 .NET 8.0 has been refreshed with an out-of-band security update as of October 25, 2026. This update is separate from the regular monthly servicing release. See the release notes for details about updated packages. Important: This out-of-band security update...

.NET 9.0 Update - October 25, 2026

.NET 9.0 Update - October 25, 2026 .NET 9.0 has been refreshed with an out-of-band security update as of October 25, 2026. This update is separate from the regular monthly servicing release. See the release notes for details about updated packages. Important: This out-of-band security update...

.NET 10.0 Update - October 25, 2026

.NET 10.0 Update - October 25, 2026 .NET 10.0 has been refreshed with an out-of-band security update as of October 25, 2026. This update is separate from the regular monthly servicing release. See the release notes for details about updated packages. Important: This out-of-band security update...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the ReceiveFromAsync process when a SocketAsyncEventArgs instance is reused across IPv4 and IPv6 datagram sockets, which can retain an undersized cached native address buffer. An attacker can achieve remote code...

Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Sockets. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. On Windows, reusing a SocketAsyncEventArgs...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the ReceiveFromAsync process when a SocketAsyncEventArgs instance is reused across IPv4 and IPv6 datagram sockets, which can retain an undersized cached native address buffer. An attacker can achieve remote code...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the ReceiveFromAsync process when a SocketAsyncEventArgs instance is reused across IPv4 and IPv6 datagram sockets, which can retain an undersized cached native address buffer. An attacker can achieve remote code...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the ReceiveFromAsync process when a SocketAsyncEventArgs instance is reused across IPv4 and IPv6 datagram sockets, which can retain an undersized cached native address buffer. An attacker can achieve remote code...