Skip to the content
The Update Bureau

.NET Framework 4.8

.NET Framework 4.8

Every published release for .NET Framework 4.8, newest first: what each update changes, whether to install it and any confirmed known issues.

Latest
KB5127683 Oct 13, 2026
File version
4.8.4811.0
Released
Apr 18, 2019
Known issues
none open

Latest update

  • KB5127683 Released Oct 13, 2026
    File version 4.8.4811.0

Update history

  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 21H2, 22H2 Security update
    Updated

    KB5127683

    Critical .NET spoofing flaw addressed

    CVE-2026-96222 is a critical .NET Framework spoofing flaw addressed by this update. It also addresses the publicly disclosed security-feature bypass CVE-2026-108398.

    Key changes 21 CVEs · 20 changes

    • Fix .NET Framework: A .NET Framework denial-of-service flaw is addressed (CVE-2026-58280).
    • Fix .NET Framework: A .NET Framework elevation-of-privilege flaw is addressed (CVE-2026-69439).
    • Fix .NET Framework: A .NET Framework denial-of-service flaw is addressed (CVE-2026-69651).

    Read update Source: Microsoft

    Builds
    4.8.4811.0 · 2.0.50727.9188
    Security
    21 fixed · 1 critical
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows Server 2022 Security update

    KB5127687

    Remote-code and security-bypass flaws are addressed

    Addresses .NET Framework security flaws, including risks that could let attackers run code or bypass a security feature. It covers Windows Server 2022 systems with .NET Framework 3.5 or 4.8 installed.

    Key changes 21 CVEs · 19 changes

    • Fix .NET Framework: A flaw that could let an attacker disrupt a service is addressed.
    • Fix .NET Framework: A flaw that could let an attacker gain higher permissions is addressed.
    • Fix .NET Framework: A flaw that could let an attacker disrupt a service is addressed.

    Read update Source: Microsoft

    Builds
    4.8.4811.0 · 2.0.50727.9188
    Security
    21 fixed · 1 critical
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 1809 · Windows Server 2019 Security update

    KB5127685

    Closes a critical spoofing flaw and a disclosed security bypass

    Fixes 21 security flaws, including a critical spoofing flaw and a publicly disclosed .NET Framework security bypass. It applies to Windows 10 version 1809 and Windows Server 2019.

    Key changes 21 CVEs · 19 changes

    • Improved .NET Framework: Blocks a flaw that could disrupt a service.
    • Improved .NET Framework: Blocks a flaw that could let someone gain higher access.
    • Improved .NET Framework: Blocks a flaw that could disrupt a service.

    Read update Source: Microsoft

    Builds
    4.8.4811.0 · 2.0.50727.9073
    Security
    21 fixed · 1 critical
    Restart
    Required
  • .NET Framework 4.8 .NET Framework 4.8 for Windows 10 1607 · Windows Server 2016 Security update

    KB5127684

    Critical spoofing flaw among 20 vulnerabilities fixed

    Fixes 20 vulnerabilities, including one critical spoofing flaw and a publicly disclosed security-feature bypass. It applies to .NET Framework 4.8 on Windows 10, version 1607 and Windows Server 2016.

    Key changes 20 CVEs · 19 changes

    • Fix .NET Framework: A flaw that could make a service stop responding is fixed.
    • Fix .NET Framework: A flaw that could let someone gain higher access is fixed.
    • Fix .NET Framework: A flaw that could make a service stop responding is fixed.

    Read update Source: Microsoft

    Build
    4.8.4811.0
    Security
    20 fixed · 1 critical
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 21H2, 22H2 Security update

    KB5126046

    Privilege and remote-code-execution flaws addressed

    Two .NET Framework flaws could allow higher privileges or remote code execution. The update addresses both; restart if affected files are in use.

    Check the newer update, KB5127683

    Key changes 2 CVEs · 2 changes

    • Fix .NET Framework: A flaw that could let someone gain higher privileges is addressed.
    • Fix .NET Framework: A flaw that could let someone run code remotely is addressed.
    • CVSS 8.8 CVE-2026-69522: .NET and Visual Studio Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Builds
    4.8.4806.0 · 2.0.50727.9183
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows Server 2022 Security update

    KB5126050

    Privilege-escalation and code-execution flaws addressed

    The update addresses .NET Framework elevation-of-privilege and remote-code-execution vulnerabilities. Although the KB page still lists CVE-2026-62886, a later correction removed it from the vulnerability listing.

    Check the newer update, KB5127687

    Key changes 2 CVEs · 2 changes

    • Fix .NET Framework: The elevation-of-privilege vulnerability CVE-2026-62886 is addressed, according to the KB page.
    • Fix .NET Framework: The remote code execution vulnerability CVE-2026-69522 is addressed.
    • CVSS 8.8 CVE-2026-69522: .NET and Visual Studio Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Builds
    4.8.4806.0 · 2.0.50727.9183
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 1809 · Windows Server 2019 Security update

    KB5126048

    Elevation-of-privilege and remote-code flaws addressed

    The update addresses two .NET Framework security vulnerabilities, including remote code execution and elevation of privilege. It applies to Windows 10 version 1809 and Windows Server 2019 systems with .NET Framework 3.5 or 4.8.

    Check the newer update, KB5127685

    Key changes 2 CVEs · 2 changes

    • Fix .NET Framework: Addresses an elevation-of-privilege vulnerability.
    • Fix .NET Framework: Addresses a remote code execution vulnerability.
    • CVSS 8.8 CVE-2026-69522: .NET and Visual Studio Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Builds
    4.8.4806.0 · 2.0.50727.9070
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 4.8 .NET Framework 4.8 for Windows 10 1607 · Windows Server 2016 Security update

    KB5126047

    Two .NET vulnerabilities addressed

    Addresses two Important .NET Framework vulnerabilities, including one that could allow remote code execution. A restart might be required if affected files are in use.

    Check the newer update, KB5127684

    Key changes 2 CVEs · 2 changes

    • Fix .NET Framework: Addresses an elevation-of-privilege vulnerability in .NET Framework.
    • Fix .NET Framework: Addresses a vulnerability that could allow remote code execution in .NET Framework.
    • CVSS 8.8 CVE-2026-69522: .NET and Visual Studio Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    4.8.4806.0
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 21H2, 22H2 Security update
    Updated

    KB5120701

    Code-execution and privilege flaws addressed

    Addresses six .NET Framework vulnerabilities, including flaws involving code execution, elevation of privilege, and information disclosure. Some WPF printing problems are resolved by later updates.

    Check the newer update, KB5126046

    Key changes 6 CVEs · 6 changes

    • Fix .NET Framework: Addresses a security flaw that could let an attacker gain higher privileges.
    • Fix .NET Framework: Addresses a security flaw that could let an attacker gain higher privileges.
    • Fix .NET Framework: Addresses a security flaw that could let an attacker run code.

    Read update Source: Microsoft

    Builds
    4.8.4805.0 · 2.0.50727.9183
    Security
    6 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows Server 2022 Security update
    Updated

    KB5120705

    Six .NET vulnerabilities addressed; later updates fix WPF errors

    Addresses six .NET Framework vulnerabilities. Some WPF printing errors caused by the update are resolved in later updates.

    Check the newer update, KB5126050

    Key changes 6 CVEs · 6 changes

    • Fix .NET Framework: Addresses an elevation-of-privilege vulnerability in .NET Framework.
    • Fix .NET Framework: Addresses an elevation-of-privilege vulnerability in .NET Framework.
    • Fix .NET Framework: Addresses a remote code execution vulnerability in .NET Framework.

    Read update Source: Microsoft

    Builds
    4.8.4805.0 · 2.0.50727.9183
    Security
    6 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 1809 · Windows Server 2019 Security update
    Updated

    KB5120703

    Six runtime flaws addressed; WPF failures need newer updates

    The update addresses six .NET Framework vulnerabilities. Some WPF printing problems are resolved only by later cumulative updates.

    Check the newer update, KB5126048

    Key changes 6 CVEs · 6 changes

    • Fix .NET Framework: An elevation-of-privilege vulnerability in .NET Framework is addressed.
    • Fix .NET Framework: An elevation-of-privilege vulnerability in .NET Framework is addressed.
    • Fix .NET Framework: A remote code execution vulnerability in .NET Framework is addressed.

    Read update Source: Microsoft

    Builds
    4.8.4805.0 · 2.0.50727.9070
    Security
    6 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 4.8 .NET Framework 4.8 for Windows 10 1607 · Windows Server 2016 Security update
    Updated

    KB5120702

    Six runtime vulnerabilities addressed; WPF print failures later resolved

    The update addresses six .NET Framework vulnerabilities. Some WPF printing failures associated with the August update are resolved in the September and October 2026 updates.

    Check the newer update, KB5126047

    Key changes 6 CVEs · 6 changes

    • Fix .NET Framework: Addresses CVE-2026-65810, an elevation-of-privilege vulnerability.
    • Fix .NET Framework: Addresses CVE-2026-62872, an elevation-of-privilege vulnerability.
    • Fix .NET Framework: Addresses CVE-2026-62886, a remote code execution vulnerability.

    Read update Source: Microsoft

    Build
    4.8.4805.0
    Security
    6 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 21H2, 22H2 Security update

    KB5101006

    Remote code execution flaw addressed; stalled requests targeted

    The update addresses 17 .NET Framework vulnerabilities, including a remote code execution flaw, and addresses cases where synchronous secure HTTP requests could hang. All 17 are rated Important; none are Critical.

    Check the newer update, KB5120701

    Key changes 17 CVEs · 18 changes

    • Fix .NET Framework: A .NET Framework denial of service vulnerability is addressed (CVE-2026-47302).
    • Fix .NET Framework: A .NET Framework security feature bypass vulnerability is addressed (CVE-2026-47304).
    • Fix .NET Framework: A .NET Framework denial of service vulnerability is addressed (CVE-2026-50304).

    Read update Source: Microsoft

    Builds
    4.8.4803.0 · 2.0.50727.9182
    Security
    17 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows Server 2022 Security update

    KB5101010

    Remote-code-execution flaw addressed; web-request hangs targeted

    Addresses 17 Important .NET Framework vulnerabilities, including a remote-code-execution flaw, and addresses an issue that could make some synchronous web requests hang.

    Check the newer update, KB5120705

    Key changes 17 CVEs · 1 change

    • Fix .NET Libraries: The update addresses an issue that could make some synchronous web requests hang during secure connections.
    • CVSS 8.1 CVE-2026-47304: .NET Security Feature Bypass Vulnerability
    • CVSS 7.8 CVE-2026-50646: .NET Framework Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Builds
    4.8.4803.0 · 2.0.50727.9182
    Security
    17 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 1809 · Windows Server 2019 Security update

    KB5101008

    Remote code execution flaw addressed; secure requests improved

    The update addresses 17 Important .NET Framework vulnerabilities, including a remote code execution flaw, and addresses hangs in some synchronous web requests.

    Check the newer update, KB5120703

    Key changes 17 CVEs · 1 change

    • Fix .NET Libraries: The update addresses hangs in synchronous web requests during certain secure connections with specific server configurations.
    • CVSS 8.1 CVE-2026-47304: .NET Security Feature Bypass Vulnerability
    • CVSS 7.8 CVE-2026-50646: .NET Framework Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Builds
    4.8.4803.0 · 2.0.50727.9069
    Security
    17 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 4.8 .NET Framework 4.8 for Windows 10 1607 · Windows Server 2016 Security update

    KB5101007

    .NET library flaws addressed; secure web requests could hang

    The update addresses 17 security flaws and a problem that could leave some secure web requests hanging with certain server settings.

    Check the newer update, KB5120702

    Key changes 17 CVEs · 18 changes

    • Improved .NET Libraries: Some secure web requests could hang with certain server settings. The update addresses this problem.
    • Fix .NET Framework: A flaw could let an attacker make an app stop responding.
    • Fix .NET Framework: A flaw could let an attacker bypass a security feature.

    Read update Source: Microsoft

    Build
    4.8.4803.0
    Security
    17 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 21H2, 22H2 Security update

    KB5087064

    Two runtime privilege flaws addressed

    The update addresses two .NET Framework flaws that could let an attacker gain higher access. It applies to Windows 10 versions 21H2 and 22H2.

    Check the newer update, KB5101006

    Key changes 2 CVEs · 2 changes

    • Fix .NET Framework: A flaw that could let an attacker gain higher access is addressed.
    • Fix .NET Framework: A second flaw that could let an attacker gain higher access is addressed.
    • CVSS 7.3 CVE-2026-32177: .NET Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Builds
    4.8.4802.0 · 2.0.50727.9181
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows Server 2022 Security update

    KB5087068

    Two flaws could let users gain higher privileges

    The update addresses two .NET Framework security flaws that could let users gain higher privileges on Windows Server 2022.

    Check the newer update, KB5101010

    Key changes 2 CVEs · 2 changes

    • Fix .NET Framework: A security flaw could let a user gain higher privileges.
    • Fix .NET Framework: A security flaw could let a user gain higher privileges.
    • CVSS 7.3 CVE-2026-32177: .NET Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Builds
    4.8.4802.0 · 2.0.50727.9181
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 1809 · Windows Server 2019 Security update

    KB5087066

    Two privilege-escalation vulnerabilities addressed

    Addresses two .NET Framework elevation-of-privilege vulnerabilities. It applies to Windows 10, version 1809 and Windows Server 2019 devices with .NET Framework 3.5 or 4.8 installed.

    Check the newer update, KB5101008

    Key changes 2 CVEs · 2 changes

    • Fix .NET Framework: Addresses a vulnerability that could let an attacker gain higher privileges.
    • Fix .NET Framework: Addresses a vulnerability that could let an attacker gain higher privileges.
    • CVSS 7.3 CVE-2026-32177: .NET Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Builds
    4.8.4802.0 · 2.0.50727.9068
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 4.8 .NET Framework 4.8 for Windows 10 1607 · Windows Server 2016 Security update

    KB5087065

    Two flaws that could give attackers more access are addressed

    Addresses two .NET Framework flaws that could let attackers gain more access.

    Check the newer update, KB5101007

    Key changes 2 CVEs · 2 changes

    • Fix .NET Framework: A security flaw that could let an attacker gain more access is addressed.
    • Fix .NET Framework: A security flaw that could let an attacker gain more access is addressed.
    • CVSS 7.3 CVE-2026-32177: .NET Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    4.8.4802.0
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 21H2, 22H2 Security update

    KB5082426

    Critical runtime denial-of-service flaw addressed; ClickOnce adds hash support

    The update addresses six vulnerabilities, including a critical .NET Framework denial-of-service flaw, and adds SHA384 and SHA512 verification support for ClickOnce. Installation might fail through DISM on offline Windows 10 IoT Enterprise LTSC 21H2 images.

    Check the newer update, KB5087064

    Key changes 6 CVEs · 1 change

    • Improved .NET Runtime: ClickOnce verification supports SHA384 and SHA512.
    • Critical CVE-2026-23666: .NET Framework Denial of Service Vulnerability
    • CVSS 7.5 CVE-2026-33116: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

    Read update Source: Microsoft

    Builds
    4.8.4801.0 · 2.0.50727.9181
    Security
    6 fixed · 1 critical
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows Server 2022 Security update

    KB5082427

    Critical service-disruption flaw addressed; ClickOnce checks expanded

    Six .NET Framework vulnerabilities are addressed, including one critical flaw that can cause denial of service. ClickOnce checks now support SHA384 and SHA512.

    Check the newer update, KB5087068

    Key changes 6 CVEs · 7 changes

    • Improved .NET Runtime: ClickOnce checks now support SHA384 and SHA512.
    • Fix .NET Framework: A flaw that could let code run remotely is addressed.
    • Fix .NET Framework: A flaw that could disrupt a service is addressed.

    Read update Source: Microsoft

    Builds
    4.8.4801.0 · 2.0.50727.9181
    Security
    6 fixed · 1 critical
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 1809 · Windows Server 2019 Security update

    KB5082414

    Critical runtime service-disruption flaw addressed; app checks improve

    Addresses six .NET Framework vulnerabilities, including one critical flaw that can cause a denial of service. It also adds support for two app verification methods.

    Check the newer update, KB5087066

    Key changes 6 CVEs · 7 changes

    • Improved .NET Framework: A security flaw that could let an attacker run code remotely is addressed.
    • Improved .NET Framework: A security flaw that could make a service unavailable is addressed.
    • Improved .NET Framework: A security flaw that could make a service unavailable is addressed.

    Read update Source: Microsoft

    Builds
    4.8.4801.0 · 2.0.50727.9068
    Security
    6 fixed · 1 critical
    Restart
    Required
  • .NET Framework 4.8 .NET Framework 4.8 for Windows 10 1607 · Windows Server 2016 Security update

    KB5082411

    Critical runtime denial-of-service flaw addressed; ClickOnce checks updated

    ClickOnce checks now support SHA384 and SHA512. The update addresses six security flaws, including critical CVE-2026-23666, which can make a service unavailable.

    Check the newer update, KB5087065

    Key changes 6 CVEs · 1 change

    • Fix .NET Runtime: ClickOnce checks now work with SHA384 and SHA512.
    • Critical CVE-2026-23666: .NET Framework Denial of Service Vulnerability
    • CVSS 7.5 CVE-2026-33116: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

    Read update Source: Microsoft

    Build
    4.8.4801.0
    Security
    6 fixed · 1 critical
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 21H2, 22H2 Security update

    KB5066135

    Information disclosure flaw CVE-2025-55248 addressed

    The update addresses CVE-2025-55248, an information disclosure vulnerability in .NET Framework 3.5 and 4.8.

    Check the newer update, KB5082426

    Key changes 1 CVE · 1 change

    • Fix .NET Framework: Addresses an information disclosure vulnerability in .NET Framework.
    • Security CVE-2025-55248: .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability

    Read update Source: Microsoft

    Builds
    4.8.4798.0 · 2.0.50727.9180
    Security
    1 vulnerability fixed
    Restart
    Required