.NET 10.0.11

Breaking: .NET 10.0.11 is here. Shipped August 11, 2026. This is a security servicing update — and it's a big one.

Ten CVEs Patched

• Remote code execution — CVE-2026-62897 and CVE-2026-70354 (.NET Core)
• Information disclosure — CVE-2026-62898, CVE-2026-62900, CVE-2026-62902
• Security feature bypass — CVE-2026-62899
• Denial of service — CVE-2026-62901
• Elevation of privilege — CVE-2026-62886, CVE-2026-62871, CVE-2026-62909

What Ships in This Release

Three SDKs bundle the 10.0.11 runtime: 10.0.400, 10.0.303, and 10.0.111. The runtime, ASP.NET Core runtime, and Windows Desktop runtime are all updated.

Docker images on mcr.microsoft.com/dotnet are refreshed. Microsoft recommends Visual Studio 18.9 on Windows.

Upgrade Now

Security patches don't wait. If you're on any .NET 10 build, this is the version to move to.

Run dotnet --version and confirm you're on 10.0.400, 10.0.303, or 10.0.111. Then update your CI images and containers.