3 articles · Curated and written by practitioners

Microsoft Patches CVSS 9.8 BinaryFormatter RCE in .NET 8.0 with KB5093447
Microsoft released KB5093447 on May 12, 2026, a security update for .NET 8.0 patching CVE-2026-26918 (BinaryFormatter RCE, CVSS 9.8), CVE-2026-26919 (ASP.NET Core DoS), and CVE-2026-26920 (info disclosure) across all platforms.

Microsoft Patches Critical .NET 8.0 JSON Deserialization RCE in KB5086096
Microsoft released KB5086096 on April 16, 2026, a critical security update for .NET 8.0 runtime and SDK patching CVE-2026-0145, CVE-2026-0146, and CVE-2026-0147 on Windows, Linux, and macOS.

Microsoft Patches Critical .NET 9.0 Vulnerabilities in KB5081278 Security Update
Microsoft released KB5081278 on March 10, 2026, a critical security update for .NET 9.0 that patches CVE-2026-0847, CVE-2026-0848, and CVE-2026-0849, addressing remote code execution, denial of service, and information disclosure across Windows, Linux, and macOS.

