The November 10, 2026 servicing updates for .NET 10, .NET 9, and .NET 8 include security and non-security fixes. This post brings together the security advisories, release notes, and download links for this month’s updates, along with resources for .NET Framework servicing.
Security improvements
The following table covers vulnerabilities affecting .NET 8, 9, 10, and 11, including associated tooling. Follow each advisory for the full list of affected products and remediation guidance.
| CVE | Vulnerability or component | Affected versions covered in this post |
|---|---|---|
| CVE-2026-114146 | ASP.NET Core Elevation of Privilege Vulnerability | 8, 9, 10, 11 |
| CVE-2026-109475 | .NET Denial of Service Vulnerability | 8, 9, 10, 11 |
| CVE-2026-114147 | ASP.NET Core Denial of Service Vulnerability | 8, 9, 10, 11 |
| CVE-2026-105544 | .NET Elevation of Privilege Vulnerability | 8, 9, 10, 11 |
| CVE-2026-114149 | ASP.NET Core Denial of Service Vulnerability | 8, 9, 10, 11 |
| CVE-2026-109478 | ASP.NET Core Denial of Service Vulnerability | 8 |
| CVE-2026-114150 | ASP.NET Core Information Disclosure Vulnerability | 11 |
| CVE-2026-114151 | Visual Studio Remote Code Execution Vulnerability | 8, 9, 10, 11 |
| CVE-2026-114152 | Visual Studio Remote Code Execution Vulnerability | 8, 9, 10, 11 |
| CVE-2026-114154 | ASP.NET Core Denial of Service Vulnerability | 8, 9, 10 |
| CVE-2026-109476 | ASP.NET Core Information Disclosure Vulnerability | 8, 9, 10, 11 |
| CVE-2026-109481 | ASP.NET Core Elevation of Privilege Vulnerability | 11 |
| CVE-2026-118745 | Visual Studio Remote Code Execution Vulnerability | 8, 9, 10, 11 |
| CVE-2026-114155 | .NET Elevation of Privilege Vulnerability | 10, 11 |
| CVE-2026-114156 | ASP.NET Core Security Feature Bypass Vulnerability | 11 |
| CVE-2026-70175 | ASP.NET Core Elevation of Privilege Vulnerability | 8, 9, 10, 11 |
| CVE-2026-118746 | .NET Security Feature Bypass Vulnerability | 11 |
| CVE-2026-118747 | .NET Denial of Service Vulnerability | 8, 9, 10, 11 |
| CVE-2026-114157 | ASP.NET Core Security Feature Bypass Vulnerability | 8, 9, 10, 11 |
| CVE-2026-114158 | Visual Studio Remote Code Execution Vulnerability | 8, 9, 10, 11 |
| CVE-2026-114159 | Visual Studio Remote Code Execution Vulnerability | 8, 9, 10, 11 |
| CVE-2026-118748 | ASP.NET Core Denial of Service Vulnerability | 11 |
| CVE-2026-118749 | ASP.NET Core Denial of Service Vulnerability | 11 |
| CVE-2026-120796 | .NET Denial of Service Vulnerability | 11 |
| CVE-2026-118741 | ASP.NET Core Elevation of Privilege Vulnerability | 8, 9, 10 |
For version-specific CVE lists, see .NET 11, .NET 10, .NET 9, and .NET 8.
Downloads and release notes
| .NET 11.0 | .NET 10.0 | .NET 9.0 | .NET 8.0 | |
|---|---|---|---|---|
| Release notes | 11.0.0 | 10.0.15 | 9.0.23 | 8.0.34 |
| Installers and binaries | 11.0.0 | 10.0.15 | 9.0.23 | 8.0.34 |
| Container images | Images | Images | Images | Images |
| Linux packages | 11.0 | 10.0 | 9.0 | 8.0 |
| Known issues | 11.0 | 10.0 | 9.0 | 8.0 |
Release changelogs
- ASP.NET Core: 11.0.0
- Entity Framework Core: 11.0.0 | 10.0.15
- Roslyn: .NET 11
- Runtime: 11.0.0 | 10.0.15
- SDK: 11.0.100
- Windows Forms: 11.0.0
.NET Framework November 2026 updates
For .NET Framework servicing information and update details, see the .NET Framework release notes.
Update to the latest servicing release
Use the download links above to update your .NET SDK and runtimes. Review the release notes and security advisories for guidance relevant to your applications.
The post .NET and .NET Framework November 2026 servicing updates appeared first on .NET Blog.