.NET and .NET Framework May 2025 Servicing Updates

Security Improvements

Security Update

Developers using .NET 8.0 and .NET 9.0 should update immediately due to a spoofing vulnerability in MSBuild (CVE-2025-26646). This affects specific versions of .NET 8.0 and .NET 9.0, as well as multiple Visual Studio versions. The vulnerability has been fixed in this release.

• CVE #: CVE-2025-26646
• Title: .NET and Visual Studio Spoofing Vulnerability
• Applies to: .NET 9.0, .NET 8.0

Release Notes

• ASP.NET Core: 8.0.16 | 9.0.5
• Entity Framework Core: 9.0.5
• Runtime: 8.0.16 | 9.0.5
• SDK: 8.0.16 | 9.0.5

.NET Framework May 2025 Updates

This month, there are no new security and non-security updates for the .NET Framework. For recent .NET Framework servicing updates, refer to the release notes.

See You Next Month

Thank you for reading the combined .NET servicing updates for May 2025. Don't forget to update to the latest service release today.