Advisories
Microsoft QUIC CVE-2026-85790: Updated Security Updates Table Adds .NET 11.0 KB Links
Microsoft updated the Security Updates table to include KB article links for .NET 11.0 concerning the CVE-2026-85790 QUIC information disclosure. The underlying fixed builds are unchanged, so no new patches are required. Defenders should confirm their .NET 11.0 deployments are current and review the KB article for details.
What Happened
Microsoft added links to the KB article for .NET 11.0 in the Security Updates table for CVE-2026-85790, a QUIC information disclosure vulnerability. The update is purely informational; the fixed builds remain the same.
Impact
Since the vulnerability has already been patched in the existing builds, no additional remediation is necessary beyond ensuring your systems are up to date.
What to Do
- Verify that your .NET 11.0 installations are at the latest patched version.
- Consult the newly linked KB article for detailed guidance and any relevant configuration notes.
- Maintain a record of the update in your change management system.
Related vulnerabilities
Microsoft Updates KB Links for .NET 11.0 and Visual Studio – CVE‑2026‑96232
Microsoft added KB article links for .NET 11.0 and Visual Studio to the security updates table for CVE‑2026‑96232. The vulnerability is an information disclosure in .NET 11.0, but the fixed builds remain unchanged. Defenders should verify they are running the latest .NET 11.0 release and review the updated KB articles.
Read briefing
CVE-2026-96957 .NET Security Feature Bypass – Informational Update
Microsoft updated the Security Updates table with KB links for .NET 11.0 and Visual Studio, clarifying that the fixed builds remain unchanged. Defenders should confirm they run the latest patched .NET version and keep Visual Studio updated.
Read briefing
Microsoft Updates .NET 11.0 Security Updates Table for CVE-2026-70197
Microsoft has updated the Security Updates table to include KB article links for .NET 11.0 and Visual Studio regarding CVE‑2026‑70197. The fixed builds remain unchanged; defenders should verify their installations are patched and consult the KB articles for guidance.
Read briefing
CVE-2026-70190: .NET Elevation of Privilege Vulnerability – No New Fix Required
CVE‑2026‑70190 is an elevation‑of‑privilege flaw in .NET 11.0 that was already addressed in earlier releases. Microsoft has updated its Security Updates table to include KB article links for .NET 11.0 and Visual Studio, but the fixed builds remain unchanged. Defenders should confirm that their systems run the latest patched .NET 11.0 and Visual Studio versions and apply any pending KB updates.
Read briefing