Welcome to our combined .NET servicing updates for August 2026. Let’s get into the latest release of .NET and .NET Framework. Here’s a quick overview of what’s new in our servicing releases:
Security improvements
.NET has been refreshed with the latest update as of August 11, 2026. This update contains security and non-security fixes.
This month you will find that these CVEs have been fixed:
| CVE # | Title | Applies to |
|---|---|---|
| CVE-2026-62898 | .NET Information Disclosure Vulnerability | .NET 10.0, .NET 9.0, .NET 8.0 |
| CVE-2026-62899 | .NET Security Feature Bypass Vulnerability | .NET 10.0, .NET 9.0, .NET 8.0 |
| CVE-2026-62900 | .NET Information Disclosure Vulnerability | .NET 10.0, .NET 9.0, .NET 8.0 |
| CVE-2026-62901 | .NET Denial of Service Vulnerability | .NET 10.0, .NET 9.0, .NET 8.0 |
| CVE-2026-62886 | .NET Elevation of Privilege Vulnerability | .NET 10.0, .NET 9.0, .NET 8.0 |
| CVE-2026-62871 | .NET Elevation of Privilege Vulnerability | .NET 10.0, .NET 9.0, .NET 8.0 |
| CVE-2026-70354 | .NET Core Remote Code Execution Vulnerability | .NET 10.0, .NET 9.0, .NET 8.0 |
| CVE-2026-62902 | .NET Information Disclosure Vulnerability | .NET 10.0, .NET 9.0, .NET 8.0 |
| CVE-2026-62897 | .NET Remote Code Execution Vulnerability | .NET 10.0, .NET 9.0, .NET 8.0 |
| CVE-2026-62909 | .NET Elevation of Privilege Vulnerability | .NET 10.0, .NET 9.0, .NET 8.0 |
| .NET 10.0 | .NET 9.0 | .NET 8.0 | |
|---|---|---|---|
| Release Notes | 10.0.11 | 9.0.19 | 8.0.30 |
| Installers and binaries | 10.0.11 | 9.0.19 | 8.0.30 |
| Container Images | images | images | images |
| Linux packages | 10.0 | 9.0 | 8.0 |
| Known Issues | 10.0 | 9.0 | 8.0 |
Release changelogs
- ASP.NET Core: 10.0.11 | 9.0.19 | 8.0.30
- Entity Framework Core: 10.0.11 | 9.0.19 | 8.0.30
- Runtime: 10.0.11 | 9.0.19 | 8.0.30
.NET Framework August 2026 Updates
This month, there are new security and non-security updates available. For recent .NET Framework servicing updates, be sure to browse our release notes for .NET Framework for more details.
See you next month
That’s it for this month, make sure you update to the latest service release today.
After the months updates we are experiencing issue with loading fonts using .Net Framework 4.8 + .Net 8 + .Net 10 (different versions of our application) and an older version of Open Sans (1.10). If upgraded to Open Sans 3.003 it works again.
Seems to be what have been reported by others already:
https://github.com/dotnet/wpf/issues/11834
https://github.com/dotnet/wpf/issues/11836
https://learn.microsoft.com/en-us/answers/questions/5974463/windows-update-breaks-wpf-truetype-font-subsetting
This is now listed as a know issue for .Net Framework:
https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2026/08-11-august-cumulative-update
For .Net there is a PR open to do the same:
https://github.com/dotnet/core/pull/10535
This problem was potentially introduced with https://github.com/dotnet/wpf/pull/11835
The release notes for .NET Framework still mention the July 14th update as the latest:
https://learn.microsoft.com/en-us/dotnet/framework/release-notes/release-notes
It has now been published:
https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2026/08-11-august-cumulative-update