Note
- Applies to:
- Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework 4.7.2
| Important The installation of this Extended Security Update (ESU) might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012 R2. For a successful installation, please make sure all Subset of endpoints for ESU only are met as described in Connected Machine agent network requirements. |
|---|
End of support information
Note
Windows Server 2012 R2 reached the end of support (EOS) on October 10, 2023. Extended Security Updates (ESUs) are available for purchase and will continue for three years, renewable on an annual basis, until the final date on October 13, 2026. For more information, see Windows Server End of Support: Key Dates. For information about the procedure to continue receiving security updates, see KB5031043.
We recommend that you upgrade to a later version of Windows Server. For more information, see Overview of Windows Server upgrades.
Windows Embedded 8 Standard reached the end of support (EOS) on July 11, 2023. Therefore, technical assistance and software updates are no longer provided.
Summary
The October 13, 2026 update for Windows Server 2012 R2 includes cumulative security and reliability improvements in .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2.
Note
Note Verify that you have installed the required updates listed in the How to get this update section before installing this update.
Security Improvements
CVE-2026-58280 - .NET Framework Denial of Service vulnerability
This security update addresses a denial of service vulnerability detailed in CVE-2026-58280.
CVE-2026-69439 - .NET Framework Elevation of Privilege vulnerability
This security update addresses an elevation of privilege vulnerability detailed in CVE-2026-69439.
CVE-2026-69651 - .NET Framework Denial of Service vulnerability
This security update addresses a denial of service vulnerability detailed in CVE-2026-69651.
CVE-2026-70007 - .NET Framework Remote Code Execution vulnerability
This security update addresses a remote code execution vulnerability detailed in CVE-2026-70007.
CVE-2026-70035 - .NET Framework Remote Code Execution vulnerability
This security update addresses a remote code execution vulnerability detailed in CVE-2026-70035.
CVE-2026-70174 - .NET Framework Remote Code Execution vulnerability
This security update addresses a remote code execution vulnerability detailed in CVE-2026-70174.
CVE-2026-83520 - .NET Framework Remote Code Execution vulnerability
This security update addresses a remote code execution vulnerability detailed in CVE-2026-83520.
CVE-2026-84008 - .NET Framework Denial of Service vulnerability
This security update addresses a denial of service vulnerability detailed in CVE-2026-84008.
CVE-2026-85363 - .NET Framework Elevation of Privilege vulnerability
This security update addresses an elevation of privilege vulnerability detailed in CVE-2026-85363.
CVE-2026-87697 - .NET Framework Remote Code Execution vulnerability
This security update addresses a remote code execution vulnerability detailed in CVE-2026-87697.
CVE-2026-96222 - .NET Framework Spoofing vulnerability
This security update addresses a spoofing vulnerability detailed in CVE-2026-96222.
CVE-2026-96224 - .NET Framework Remote Code Execution vulnerability
This security update addresses a remote code execution vulnerability detailed in CVE-2026-96224.
CVE-2026-96233 - .NET Framework Denial of Service vulnerability
This security update addresses a denial of service vulnerability detailed in CVE-2026-96233.
CVE-2026-96958 - .NET Framework Denial of Service vulnerability
This security update addresses a denial of service vulnerability detailed in CVE-2026-96958.
CVE-2026-96959 - .NET Framework Denial of Service vulnerability
This security update addresses a denial of service vulnerability detailed in CVE-2026-96959.
CVE-2026-96960 - .NET Framework Denial of Service vulnerability
This security update addresses a denial of service vulnerability detailed in CVE-2026-96960.
CVE-2026-97788 - .NET Framework Information Disclosure vulnerability
This security update addresses an information disclosure vulnerability detailed in CVE-2026-97788.
CVE-2026-97801 - .NET Framework Tampering vulnerability
This security update addresses a tampering vulnerability detailed in CVE-2026-97801.
CVE-2026-108398 - .NET Framework Mitigation Bypass vulnerability
This security update addresses a mitigation bypass vulnerability detailed in CVE-2026-108398.
Quality and Reliability Improvements
There are no new Quality and Reliability Improvements in this update.
Additional information about this update
The following articles contain additional information about this update as it relates to individual product versions.
- 5128927 Description of the Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5128927)
Known issues in this update
Microsoft is not currently aware of any issues in this update.
How to get this update
Before installing this update
We strongly recommend that you install the latest servicing stack update (SSU) for your operating system before installing the latest Rollup. SSUs improve the reliability of the update process to mitigate potential issues while installing the Rollup and applying Microsoft security fixes. For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
If you use Windows Update, the latest SSU (KB5044411) will be offered to you automatically. To get the standalone package for the latest SSU, search for it in the Microsoft Update Catalog.
Language packs
If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.
To apply this update, you must have .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 installed.
Install this update
| Release Channel | Available | Next Step |
|---|---|---|
| Windows Update and Microsoft Update | Yes | None. This update will be downloaded and installed automatically from Windows Update. |
| Microsoft Update Catalog | Yes | To get the standalone package for this update, go to the Microsoft Update Catalog website. |
| Windows Server Update Services (WSUS) | Yes | This individual .NET Framework product update will be installed, as applicable, by applying the operating system update. For more information about operating system updates see additional information about this update section. |
Restart requirement
You may need to restart the computer after you apply this update if any affected files are being used. We recommend that you exit all .NET Framework-based applications before you apply this update.
Update deployment information
For deployment details for this security update, see the Deployments tab of the Microsoft Security Response Center (MSRC) Security Update Guide.
Update replacement information
This update replaces previously released updates KB5126148 and KB5121649.
File Information
File hash information
| File name | SHA256 hash |
|---|---|
| Windows8.1-KB5127668-x64.msu | 2CE0A21DB7C5A544518FB24C37FE1B0F531933FA5B83D5968AF1B04994AAA93F |
| Windows8.1-KB5127668-x86.msu | 6D8CCF610D6CB1753D59469D5F7F7E818783EF06BFBE8CA4F72BD166986745DC |
How to obtain help and support for this update
- Help for installing updates: Windows Update FAQ
- Protect yourself online and at home: Windows Security support
- Local support according to your country/region: International Support