KB5127664: CVEs fixed (Windows update (KB))

KB5127664 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-96960 HIGH 7.5 UPGRADE DOWNGRADE Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a
• CVE-2026-96959 HIGH 7.5 UPGRADE DOWNGRADE Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service o

Applies to

• Microsoft .NET Framework 3.5 on Windows Server 2012 R2 · fixed in 2.0.50727.8987 AND 3.0.30729.8982

← Back to latest CVEs