Welcome to our combined .NET servicing updates for May 2025. Let’s get into the latest release of .NET & .NET Framework, here is a quick overview of what’s new in our servicing releases:
Security improvements
Security Update
All developers using .NET 8.0 and .NET 9.0 should update immediately due to a spoofing vulnerability in MSBuild (CVE-2025-26646). This affects .NET 8.0 (versions 8.0.1xx and 8.0.4xx) and .NET 9.0 (versions 9.0.1xx through 9.0.3xx), as well as multiple Visual Studio versions. The vulnerability could allow attackers to spoof trusted content, potentially compromising build processes in development and CI/CD environments.
This month you will find that these CVEs have been fixed:
| CVE # | Title | Applies to |
|---|---|---|
| CVE-2025-26646 | .NET and Visual Studio Spoofing Vulnerability | .NET 9.0, .NET 8.0 |
| .NET 8.0 | .NET 9.0 | |
|---|---|---|
| Release Notes | 8.0.16 | 9.0.5 |
| Installers and binaries | 8.0.16 | 9.0.5 |
| Container Images | images | images |
| Linux packages | 8.0.16 | 9.0.5 |
| Known Issues | 8.0 | 9.0 |
Release changelogs
- ASP.NET Core: 8.0.16 | 9.0.5
- Entity Framework Core: 9.0.5
- Runtime: 8.0.16 | 9.0.5
- SDK: 8.0.16 | 9.0.5
Share feedback about this release in the Release feedback issue.
.NET Framework May 2025 Updates
This month, there are no new security and non-security updates. For recent .NET Framework servicing updates, be sure to browse our release notes for .NET Framework for more details.
See you next month
That’s it for this month, make sure you update to the latest service release today.
The post .NET and .NET Framework May 2025 servicing releases updates appeared first on .NET Blog.
