The Update Bureau
Addresses two Important .NET Framework security flaws. Both could let someone gain higher access than intended.
Check the newer update, KB5101001Key changes 2 CVEs · 2 changes
Two .NET Framework elevation-of-privilege vulnerabilities, CVE-2026-32177 and CVE-2026-35433, are addressed. A restart is required if affected files are in use.
Check the newer update, KB5101004Key changes 2 CVEs · 2 changes
The update addresses two elevation-of-privilege vulnerabilities in .NET Framework 3.5 and 4.8.1. A restart might be required if affected files are in use.
Check the newer update, KB5101000Key changes 2 CVEs · 2 changes
Addresses two important security flaws in .NET Framework. It applies to Windows Server 2022 devices with .NET Framework 3.5 or 4.8.1 installed.
Check the newer update, KB5101005Key changes 2 CVEs · 2 changes
The update addresses two .NET Framework flaws that could let an attacker gain higher access. It applies to Windows 10 versions 21H2 and 22H2.
Check the newer update, KB5101006Key changes 2 CVEs · 2 changes
The update addresses two .NET Framework security flaws that could let users gain higher privileges on Windows Server 2022.
Check the newer update, KB5101010Key changes 2 CVEs · 2 changes
Addresses two .NET Framework elevation-of-privilege vulnerabilities. It applies to Windows 10, version 1809 and Windows Server 2019 devices with .NET Framework 3.5 or 4.8 installed.
Check the newer update, KB5101008Key changes 2 CVEs · 2 changes
Addresses two .NET Framework flaws that could let attackers gain more access.
Check the newer update, KB5101007Key changes 2 CVEs · 2 changes
The update addresses two flaws that could let attackers gain higher access. It adds no new reliability improvements.
Check the newer update, KB5100989Key changes 2 CVEs · 2 changes
The update addresses six .NET Framework vulnerabilities, including one critical denial-of-service flaw, and a problem running WCF NamedPipe services in Win32 app containers.
Check the newer update, KB5087055Key changes 6 CVEs · 7 changes
Addresses a .NET Framework issue affecting local communication services in some Windows apps, and fixes six vulnerabilities, including one critical denial-of-service flaw.
Check the newer update, KB5087051Key changes 6 CVEs · 1 change
The update addresses six vulnerabilities, including a critical denial-of-service flaw, and addresses a problem running a Windows communication service in an app's restricted environment.
Check the newer update, KB5087054Key changes 6 CVEs · 7 changes
The update addresses six .NET Framework vulnerabilities, including one critical denial-of-service flaw, and improves reliability for ClickOnce checks, ARM devices, and WCF services.
Check the newer update, KB5087058Key changes 6 CVEs · 9 changes
Addresses six .NET Framework vulnerabilities, including one critical denial-of-service flaw, and fixes an ARM64 runtime crash. Installation might fail through DISM on an offline Windows 10 IoT Enterprise LTSC 21H2 image.
Check the newer update, KB5087053Key changes 6 CVEs · 9 changes
The update addresses six vulnerabilities, including a critical .NET Framework denial-of-service flaw, and reliability issues in ClickOnce, the ARM64 runtime, and WCF.
Check the newer update, KB5087059Key changes 6 CVEs · 3 changes
The update addresses six vulnerabilities, including a critical .NET Framework denial-of-service flaw, and adds SHA384 and SHA512 verification support for ClickOnce. Installation might fail through DISM on offline Windows 10 IoT Enterprise LTSC 21H2 images.
Check the newer update, KB5087064Key changes 6 CVEs · 1 change
Six .NET Framework vulnerabilities are addressed, including one critical flaw that can cause denial of service. ClickOnce checks now support SHA384 and SHA512.
Check the newer update, KB5087068Key changes 6 CVEs · 7 changes
Addresses six .NET Framework vulnerabilities, including one critical flaw that can cause a denial of service. It also adds support for two app verification methods.
Check the newer update, KB5087066Key changes 6 CVEs · 7 changes
ClickOnce checks now support SHA384 and SHA512. The update addresses six security flaws, including critical CVE-2026-23666, which can make a service unavailable.
Check the newer update, KB5087065Key changes 6 CVEs · 1 change
Six .NET Framework security flaws are addressed, including one critical flaw that could stop a service from responding. ClickOnce also gains support for SHA384 and SHA512 checks.
Check the newer update, KB5087061Key changes 6 CVEs · 7 changes
The update addresses CVE-2025-55248, an information disclosure vulnerability, and three .NET Runtime reliability issues, including a possible crash on Arm64.
Check the newer update, KB5082421Key changes 1 CVE · 4 changes
Adds SHA384 and SHA512 verification support for ClickOnce and addresses a case where the .NET runtime could crash on ARM64 devices.
Check the newer update, KB5082417Key changes 2 changes
Adds ClickOnce verification for SHA384 and SHA512 and addresses an issue that could crash the .NET runtime on arm64 devices.
Check the newer update, KB5082420Key changes 2 changes
The preview updates .NET Runtime operating-system calls for compliance with current standards. It adds no new security improvements.
Check the newer update, KB5074828Key changes 1 change
Fixes a flaw that could expose information in .NET Framework. It applies to Windows 11 version 25H2 with .NET Framework 3.5 or 4.8.1 installed.
Check the newer update, KB5082417Key changes 1 CVE · 1 change