Patch tracker / Products / Microsoft .NET Framework 4.8 on Windows Server 2016

Microsoft .NET Framework 4.8 on Windows Server 2016: vulnerabilities and security updates

Every CVE affecting Microsoft .NET Framework 4.8 on Windows Server 2016 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
3
Updates (KBs)
14
Actively exploited (KEV)
0
Critical Severity
3

CVEs affecting Microsoft .NET Framework 4.8 on Windows Server 2016

CVESeverityCVSSEPSSStatus
CVE-2026-62872Critical9.8--
CVE-2026-65810Critical9.8--
CVE-2026-70354Critical9.8--

Updates (KBs) for Microsoft .NET Framework 4.8 on Windows Server 2016

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB51206952026-08-11High8.8-3-
KB51206992026-08-11High8.8-3-
KB51207002026-08-11High8.8-3-
KB51207012026-08-11High8.8-3-
KB51207022026-08-11High8.8-3-
KB51207042026-08-11High8.8-3-
KB51207052026-08-11High8.8-3-
KB51207062026-08-11High8.8-3-
KB51207082026-08-11High8.8-3-
KB51207092026-08-11High8.8-3-
KB51207102026-08-11High8.8-3-
KB51207132026-08-11High8.8-3-
KB51207142026-08-11High8.8-3-
KB51207162026-08-11High8.8-3-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5099540: the full CVE list KB5099538: patch details KB5094123: the full CVE list KB5099539 install notes and severity CVE-2026-50522: severity and the patch KB5101001 download and what it fixes KB5101650: the full CVE list CVE-2026-48282 exploit status KB5101010: the full CVE list KB5102334 install notes and severity
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
Provided as is, without warranty; verify against the vendor advisory before acting. Data notice and terms.