Read the docs
Microsoft update

KB5130036

Security Update

View on Microsoft →

Fixed in

Fixes 4 records

Priority LOW 39

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00788 Published 2026-10-13 Fixed in 10.0.403, 10.0.13 +16 CWE-787
Priority LOW 36

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00411 Published 2026-10-13 Fixed in 10.0.13, 11.0.0-rc.2 +4 CWE-59
Priority LOW 35

Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.0049 Published 2026-10-13 Fixed in 10.0.402, 11.0.100-rc.2 +4 CWE-22