runtime
v9.0.23.NET is a cross-platform runtime for cloud, mobile, desktop, and IoT apps.
- Maintenance
- Active2820 commits in 3 months · bus factor 16
- License
- MITPermissive · OSI-approved
- Security
- 30 advisories1 critical, 22 high, 7 medium · Scorecard 5.0/10
- Supported versions
- No scheduleendoflife.date does not track this project
18.4k stars · 5.8k forks · 8.4k open issues · last release 4 days ago · data checked 4 hours ago
Security advisories
All advisories on GitHubThe 30 most recent advisories published by the maintainers: 1 critical, 22 high, 7 medium. Check the patched version against the one you run.
- highCVE-2026-118745Nov 10, 2026Microsoft Security Advisory CVE-2026-118745 - Visual Studio Remote Code Execution Vulnerability
- Affected
- >= 8.0.0, < 8.0.34; >= 9.0.0, < 9.0.23; >= 10.0.0, < 10.0.15; >= 11.0.0-preview.1, < 11.0.0; >= 8.0.100-0, < 8.0.134; >= 8.0.400-0, < 8.0.428; >= 9.0.100-0, < 9.0.124; >= 9.0.300-0, < 9.0.321; >= 10.0.100-0, < 10.0.115; >= 10.0.400-0, < 10.0.404; >= 11.0.100-preview.1, < 11.0.100
- Patched in
- 8.0.34; 9.0.23; 10.0.15; 11.0.0; 8.0.134; 8.0.428; 9.0.124; 9.0.321; 10.0.115; 10.0.404; 11.0.100
- highCVE-2026-114152Nov 10, 2026Microsoft Security Advisory CVE-2026-114152 - Visual Studio Remote Code Execution Vulnerability
- Affected
- >= 8.0.0, < 8.0.34; >= 9.0.0, < 9.0.23; >= 10.0.0, < 10.0.15; >= 11.0.0-preview.1, < 11.0.0; >= 8.0.100-0, < 8.0.134; >= 8.0.400-0, < 8.0.428; >= 9.0.100-0, < 9.0.124; >= 9.0.300-0, < 9.0.321; >= 10.0.100-0, < 10.0.115; >= 10.0.400-0, < 10.0.404; >= 11.0.100-preview.1, < 11.0.100
- Patched in
- 8.0.34; 9.0.23; 10.0.15; 11.0.0; 8.0.134; 8.0.428; 9.0.124; 9.0.321; 10.0.115; 10.0.404; 11.0.100
- highCVE-2026-114151Nov 10, 2026Microsoft Security Advisory CVE-2026-114151 - Visual Studio Remote Code Execution Vulnerability
- Affected
- >= 8.0.0, < 8.0.34; >= 9.0.0, < 9.0.23; >= 10.0.0, < 10.0.15; >= 11.0.0-preview.1, < 11.0.0; >= 8.0.100-0, < 8.0.134; >= 8.0.400-0, < 8.0.428; >= 9.0.100-0, < 9.0.124; >= 9.0.300-0, < 9.0.321; >= 10.0.100-0, < 10.0.115; >= 10.0.400-0, < 10.0.404; >= 11.0.100-preview.1, < 11.0.100
- Patched in
- 8.0.34; 9.0.23; 10.0.15; 11.0.0; 8.0.134; 8.0.428; 9.0.124; 9.0.321; 10.0.115; 10.0.404; 11.0.100
- highCVE-2026-114159Nov 10, 2026Microsoft Security Advisory CVE-2026-114159 - Visual Studio Remote Code Execution Vulnerability
- Affected
- >= 8.0.0, < 8.0.34; >= 9.0.0, < 9.0.23; >= 10.0.0, < 10.0.15; >= 11.0.0-preview.1, < 11.0.0; >= 8.0.100-0, < 8.0.134; >= 8.0.400-0, < 8.0.428; >= 9.0.100-0, < 9.0.124; >= 9.0.300-0, < 9.0.321; >= 10.0.100-0, < 10.0.115; >= 10.0.400-0, < 10.0.404; >= 11.0.100-preview.1, < 11.0.100
- Patched in
- 8.0.34; 9.0.23; 10.0.15; 11.0.0; 8.0.134; 8.0.428; 9.0.124; 9.0.321; 10.0.115; 10.0.404; 11.0.100
- highCVE-2026-114158Nov 10, 2026Microsoft Security Advisory CVE-2026-114158 - Visual Studio Remote Code Execution Vulnerability
- Affected
- >= 8.0.0, < 8.0.34; >= 9.0.0, < 9.0.23; >= 10.0.0, < 10.0.15; >= 11.0.0-preview.1, < 11.0.0; >= 8.0.100-0, < 8.0.134; >= 8.0.400-0, < 8.0.428; >= 9.0.100-0, < 9.0.124; >= 9.0.300-0, < 9.0.321; >= 10.0.100-0, < 10.0.115; >= 10.0.400-0, < 10.0.404; >= 11.0.100-preview.1, < 11.0.100
- Patched in
- 8.0.34; 9.0.23; 10.0.15; 11.0.0; 8.0.134; 8.0.428; 9.0.124; 9.0.321; 10.0.115; 10.0.404; 11.0.100
- highCVE-2026-109475Nov 10, 2026Microsoft Security Advisory CVE-2026-109475 - .NET Denial of Service Vulnerability
- Affected
- >= 8.0.0-0, <= 8.0.33; >= 9.0.0-0, <= 9.0.22; >= 10.0.0-0, <= 10.0.14; >= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148
- Patched in
- 8.0.34; 9.0.23; 10.0.15; 11.0.0
- mediumCVE-2026-120796Nov 10, 2026Microsoft Security Advisory CVE-2026-120796 - .NET Denial of Service Vulnerability
- Affected
- >= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148
- Patched in
- 11.0.0
- mediumCVE-2026-118746Nov 10, 2026Microsoft Security Advisory CVE-2026-118746 - .NET Security Feature Bypass Vulnerability
- Affected
- >= 11.0.0-preview.1, < 11.0.0-preview.7.26381.103; > 11.0.0-preview.7.26381.103, < 11.0.0
- Patched in
- 11.0.0
- highCVE-2026-118747Nov 10, 2026Microsoft Security Advisory CVE-2026-118747 - .NET Denial of Service Vulnerability
- Affected
- >= 8.0.0-0, < 8.0.2; >= 9.0.0-0, < 9.0.24; >= 10.0.0-0, < 10.0.15; >= 11.0.0-0, < 11.0.0
- Patched in
- 8.0.2; 9.0.24; 10.0.15; 11.0.0
- highCVE-2026-111497Oct 25, 2026Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability
- Affected
- >= 8.0.0, < 8.0.33; >= 9.0.0, < 9.0.22; >= 10.0.0, < 10.0.14; >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148; >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148
- Patched in
- 8.0.33; 9.0.22; 10.0.14; 11.0.0-rc.3.26522.148
- highCVE-2026-96960Oct 13, 2026Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability
- Affected
- >= 10.0.0, <= 10.0.12; >= 11.0.0-preview.1, <= 11.0.0-rc.1; >= 8.0.0, <= 8.0.4; >= 9.0.0, <= 9.0.20
- Patched in
- 10.0.13; 11.0.0-rc.2; 8.0.5; 9.0.21
- highCVE-2026-96959Oct 13, 2026Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability
- Affected
- >= 10.0.0, <= 10.0.12; >= 11.0.0-preview.1, <= 11.0.0-rc.1; >= 8.0.0, <= 8.0.4; >= 9.0.0, <= 9.0.20
- Patched in
- 10.0.13; 11.0.0-rc.2; 8.0.5; 9.0.21
- highCVE-2026-96233Oct 13, 2026Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability
- Affected
- >= 10.0.0, <= 10.0.12; >= 11.0.0-preview.1, <= 11.0.0-rc.1; >= 9.0.0, <= 9.0.20; >= 8.0.0, <= 8.0.31
- Patched in
- 10.0.13; 11.0.0-rc.2; 9.0.21; 8.0.32
- highCVE-2026-96958Oct 13, 2026Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of Service Vulnerability
- Affected
- >= 10.0.0, <= 10.0.12; >= 11.0.0-preview.1, <= 11.0.0-rc.1; >= 8.0.0, <= 8.0.4; >= 9.0.0, <= 9.0.20
- Patched in
- 10.0.13; 11.0.0-rc.2; 8.0.5; 9.0.21
- highCVE-2026-96231Oct 13, 2026Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability
- Affected
- >= 8.0.0, <= 8.0.31; >= 10.0.0, <= 10.0.12; >= 9.0.0, <= 9.0.20; >= 11.0.0-preview.1, <= 11.0.0-rc.1
- Patched in
- 8.0.32; 10.0.13; 9.0.21; 11.0.0-rc.2
- highCVE-2026-96225Oct 13, 2026Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability
- Affected
- >= 8.0.0, <= 8.0.31; >= 10.0.0, <= 10.0.12; >= 11.0.0-preview.1, <= 11.0.0-rc.1; >= 9.0.0, <= 9.0.20
- Patched in
- 8.0.32; 10.0.13; 11.0.0-rc.2; 9.0.21
- highCVE-2026-96222Oct 13, 2026Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability
- Affected
- >= 8.0.0, <= 8.0.4
- Patched in
- 8.0.5
- mediumCVE-2026-85790Oct 13, 2026Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerability
- Affected
- >= 1.9.0, < 2.5.12; >= 2.6.0, < 2.6.3
- Patched in
- 2.5.12; 2.6.3
- highCVE-2026-84008Oct 13, 2026Microsoft Security Advisory CVE-2026-84008 - .NET Denial of Service Vulnerability
- Affected
- >= 10.0.0, <= 10.0.12; >= 11.0.0-preview.1, <= 11.0.0-rc.1; >= 8.0.0, <= 8.0.1; >= 9.0.0, <= 9.0.20
- Patched in
- 10.0.13; 11.0.0-rc.2; 8.0.2; 9.0.21
- highCVE-2026-70197Oct 13, 2026Microsoft Security Advisory CVE-2026-70197 – .NET and Visual Studio Remote Code Execution Vulnerability
- Affected
- >= 8.0.0, < 8.0.33; >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148; >= 9.0.0, < 9.0.22; >= 10.0.0, < 10.0.14
- Patched in
- 8.0.33; 11.0.0-rc.3.26522.148; 9.0.22; 10.0.14
- mediumCVE-2026-70194Oct 13, 2026Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability
- Affected
- >= 11.0.0-preview.1, <= 11.0.0-rc.1
- Patched in
- 11.0.0-rc.2
- mediumCVE-2026-70162Oct 13, 2026Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability
- Affected
- >= 10.0.0, <= 10.0.12; >= 11.0.0-preview.1, <= 11.0.0-rc.1; >= 8.0.0, <= 8.0.1; >= 9.0.0, <= 9.0.20
- Patched in
- 10.0.13; 11.0.0-rc.2; 8.0.2; 9.0.21
- highCVE-2026-69651Oct 13, 2026Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability
- Affected
- >= 9.0.0, <= 9.0.20; >= 11.0.0-preview.1, <= 11.0.0-rc.1; >= 10.0.0, <= 10.0.12; >= 8.0.0, <= 8.0.31
- Patched in
- 9.0.21; 11.0.0-rc.2; 10.0.13; 8.0.32
- mediumCVE-2026-66822Oct 13, 2026Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability
- Affected
- >= 9.0.0, <= 9.0.20; >= 11.0.0-preview.1, <= 11.0.0-rc.1; >= 10.0.0, <= 10.0.12; >= 8.0.0, <= 8.0.31
- Patched in
- 9.0.21; 11.0.0-rc.2; 10.0.13; 8.0.32
- highCVE-2026-58280Oct 13, 2026Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability
- Affected
- >= 9.0.0, <= 9.0.20; >= 8.0.0, <= 8.0.31; >= 10.0.0, <= 10.0.12; >= 11.0.0-preview.1, <= 11.0.0-rc.1
- Patched in
- 9.0.21; 8.0.32; 10.0.13; 11.0.0-rc.2
- criticalCVE-2026-105016Oct 13, 2026Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability
- Affected
- >= 2.5.11-ci.156755675, <= 2.5.11-ci.156755675
- Patched in
- 2.5.11-ci.159417053
- highCVE-2026-71328Sep 8, 2026Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability
- Affected
- >= 17.10.0-beta1.24272.1, <= 18.9.0-beta1.26405.1
- Patched in
- 18.9.0-beta1.26405.2
- highCVE-2026-69522Sep 8, 2026Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability
- Affected
- >= 17.10.0-beta1.24272.1, <= 18.9.0-beta1.26405.1
- Patched in
- 18.9.0-beta1.26405.2
- highCVE-2026-69439Sep 8, 2026Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability
- Affected
- >= 17.10.0-beta1.24272.1, <= 18.9.0-beta1.26405.1
- Patched in
- 18.9.0-beta1.26405.2
- mediumCVE-2026-62909Aug 11, 2026Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability
- Affected
- >= 10.0.0, <= 10.0.10; >= 9.0.0, <= 9.0.18; >= 8.0.0, <= 8.0.29
- Patched in
- 10.0.11; 9.0.19; 8.0.30