Resolved.NET 8.0 Runtime
Microsoft Patches CVSS 9.8 BinaryFormatter RCE in .NET 8.0 with KB5093447
Microsoft released KB5093447 on May 12, 2026, a security update for .NET 8.0 patching CVE-2026-26918 (BinaryFormatter RCE, CVSS 9.8), CVE-2026-26919 (ASP.NET Core DoS), and CVE-2026-26920 (info disclosure) across all platforms.