Welcome to our combined .NET servicing updates for March 2026. Let’s get into the latest release of .NET & .NET Framework, here is a quick overview of what’s new in our servicing releases:
Security improvements
.NET and .NET Framework has been refreshed with the latest update as of March 10, 2026. This update contains security and non-security fixes.
This month you will find that these CVEs have been fixed:
| CVE # | Title | Applies to |
|---|---|---|
| CVE-2026-26130 | .NET Security Feature Bypass Vulnerability | .NET 10.0, .NET 9.0, .NET 8.0 |
| CVE-2026-26127 | .NET Security Feature Bypass Vulnerability | .NET 10.0, .NET 9.0 |
| CVE-2026-26131 | .NET Security Feature Bypass Vulnerability | .NET 10.0 |
| .NET 10.0 | .NET 9.0 | .NET 8.0 | |
|---|---|---|---|
| Release Notes | 10.0.4 | 9.0.14 | 8.0.25 |
| Installers and binaries | 10.0.4 | 9.0.14 | 8.0.25 |
| Container Images | images | images | images |
| Linux packages | 10.0 | 9.0 | 8.0 |
| Known Issues | 10.0 | 9.0 | 8.0 |
Release changelogs
- ASP.NET Core: 10.0.4
- Entity Framework Core: 10.0.4
- Runtime: 10.0.4 | 9.0.14 | 8.0.25
- WPF: 10.0.4 | 9.0.14
Share feedback about this release in the Release feedback issue.
.NET Framework March 2026 Updates
This month, there are no new security or new non-security updates available. For recent .NET Framework servicing updates, be sure to browse our release notes for .NET Framework for more details.
See you next month
That’s it for this month, make sure you update to the latest service release today.
Er, are we getting an emergency patch or something? I checked for NuGet package updates and a ton are now 10.0.5. I have several like Microsoft.AspNetCore.App.Internal.Assets that show 10.0.4 installed with “Latest Stable 10.0.5” in version selection, until I actually select a project that uses Microsoft.AspnetCore.App.Internal.Assets where it changes to “Latest Sable 10.0.4”
https://1drv.ms/i/c/72d311029cf46c9e/IQARdDdHRUdYRYjyO2c96M9WAYzb-xgYCjw2j1ycqh6Kf0g?e=fNH7bh
Yes. We released .NET 10.0.5 out of band update today to address a regression in .NET 10.0.4. for more details: https://devblogs.microsoft.com/dotnet/dotnet-10-0-5-oob-release-macos-debugger-fix/
I use vs 2026. Clone a repository with my friend's id, code was running. Create new branch and commit and push.
After some days, change friends userid with my new email. But there is error with pull from main branch in vs 2026 and disabled pull option.
I was tried in powershell then it works for pull only.
When i tried to pull using remote instaed of local branch, it conflicts with the same name, do nothings, but pull is not happened.
I think this conflict came from changing ids. Also branches not showing in green.
Now i rename the solution folder and clone repository...