.NET 10.0.12 released with fixes for 6 CVEs
.NET 10.0.12 was released on 2026-09-08. It ships .NET Runtime 10.0.12, ASP.NET Core Runtime 10.0.12, SDK 10.0.401, 10.0.112. The official release metadata lists 6 CVEs addressed in this release. .NET 10.0 is an LTS release currently in the "active" support phase, with support ending on 2028-11-14. It has since been superseded by .NET 10.0.13.
What was released From the source
According to Microsoft's official .NET release metadata, .NET 10.0.12 was published on 2026-09-08. The components and versions in this release are:
- Release: .NET 10.0.12
- Release date: 2026-09-08
- .NET Runtime: 10.0.12
- ASP.NET Core Runtime: 10.0.12
- SDK versions: 10.0.401, 10.0.112
- C# language version: 14.0
- Visual Studio versions: 18.9.3, 18.10.0
- Release type: LTS
- Support phase: Active support
- End of support: 2028-11-14
- Latest .NET 10.0 release: 10.0.13
- Security release: Yes (6 CVEs listed)
At a glance · .NET release
About 25 months of support left
Security fixes listed for this release From the source
The release metadata marks this as a security release and lists the following CVE identifiers. Severity, affected components and mitigations for each CVE are described in the official release notes and the CVE records.
- CVE-2026-69439
- CVE-2026-71328
- CVE-2026-69522
- CVE-2026-69304
- CVE-2026-58649
- CVE-2026-69806
Why it matters Analysis
This is a past servicing release. Each .NET patch includes the fixes from earlier patches in the same channel, so applications should run the latest .NET 10.0 release, 10.0.13, rather than this one. Hosts that are still on a patch older than 10.0.12 are exposed to the issues listed above.
Who should care Analysis
- Teams running .NET 10.0 applications in production or testing
- Owners of container images built on .NET 10.0 base images
- Teams that publish self-contained or single-file applications
- Developers and CI pipelines that pin an SDK version in global.json
How to update Analysis
- Check installed versions with
dotnet --list-runtimesanddotnet --list-sdks. - Install the latest .NET 10.0 release, 10.0.13, from the official download page or your operating system's package manager.
- Rebuild container images so they pick up the updated base image, and rebuild self-contained apps.
- Read the release notes for known issues and run your test suite before rolling out to production.
Sources and further reading
- .NET 10.0.12 release notes (original source)
- .NET 10.0 release metadata (JSON) (official)
- Download .NET 10.0 (official)
- .NET support policy (documentation)
Original: “.NET 10.0.12 released with 6 security fixes”, .NET release metadata, published 8 Sep 2026, retrieved 16 Oct 2026. This article was generated from the official source using our structured templates and passed automated quality checks. Spotted a mistake? See our corrections policy.