February 10th, 2026
0 reactions

.NET and .NET Framework February 2026 servicing releases updates

Welcome to our combined .NET servicing updates for February 2026. Let’s get into the latest release of .NET & .NET Framework, here is a quick overview of what’s new in our servicing releases:

Security improvements

.NET and .NET Framework has been refreshed with the latest update as of February 10, 2026. This update contains security and non-security fixes.

This month you will find that these CVEs have been fixed:

CVE # Title Applies to
CVE-2026-21218 .NET Security Feature Bypass Vulnerability .NET 10.0, .NET 9.0, .NET 8.0
.NET 10.0 .NET 9.0 .NET 8.0
Release Notes 10.0.3 9.0.13 8.0.24
Installers and binaries 10.0.3 9.0.13 8.0.24
Container Images images images images
Linux packages 10.0 9.0 8.0
Known Issues 10.0 9.0 8.0

Release changelogs

Share feedback about this release in the Release feedback issue.

.NET Framework February 2026 Updates

This month, there are no new security or new non-security updates available. For recent .NET Framework servicing updates, be sure to browse our release notes for .NET Framework for more details.

See you next month

That’s it for this month, make sure you update to the latest service release today.

Author

Rahul Bhandari (MSFT)
Senior Program Manager

I am a Program Manager on .NET team. I specializes in .NET release processes. University of Florida Alumnus.

Tara Overfield
Senior Software Engineer

Tara is a Software Engineer on the .NET team. She works on releasing .NET Framework updates.

1 comment

Sort by :
  • Calvin Nel

    am i wrong by saying.. shouldnt

    https://github.com/dotnet/core/blob/main/release-notes/10.0/known-issues.md

    be updated a little…

    issue : ASP.NET Core Runtime Hosting Bundle upgrade breaks IIS hosting on ARM64 machines

    isnt this 100% resolved… and should be saying that and say it was effected in version x and resolved in y

    issue Startup Performance Regression in Fractional CPU Containers

    the ticket to this should be included… wasnt this address some what in 10.0.2 with the “lazy type” changes…

    just interested if my comments are valid…