.NET and .NET Framework May 2025 servicing releases updates

Welcome to our combined .NET servicing updates for May 2025. Let’s get into the latest release of .NET & .NET Framework, here is a quick overview of what’s new in our servicing releases:

Security improvements

We have released .NET 8.0.313 and .NET 8.0.410 which is an update to .NET 8.0.312 and .NET 8.0.409 SDK. Our May release for .NET 8.0.312 and .NET 8.0.409 missed a fix for CVE-2025-26646 which impacts Microsoft.Build.Tasks.core.dll.

Note that there is no change to the .NET 8.0.16 runtime, this is an SDK only change. No action is required if you’re only deploying the .NET 8 runtime, but if you’re deploying the .NET 8 SDK then you will need to pick up the re-release with the fix.

Security Update

All developers using .NET 8.0 and .NET 9.0 should update immediately due to a spoofing vulnerability in MSBuild (CVE-2025-26646). This affects .NET 8.0 (versions 8.0.1xx and 8.0.4xx) and .NET 9.0 (versions 9.0.1xx through 9.0.3xx), as well as multiple Visual Studio versions. The vulnerability could allow attackers to spoof trusted content, potentially compromising build processes in development and CI/CD environments.

This month you will find that these CVEs have been fixed:

CVE #	Title	Applies to
CVE-2025-26646	.NET and Visual Studio Spoofing Vulnerability	.NET 9.0, .NET 8.0

	.NET 8.0	.NET 9.0
Release Notes	8.0.16	9.0.5
Installers and binaries	8.0.16	9.0.5
Container Images	images	images
Linux packages	8.0.16	9.0.5
Known Issues	8.0	9.0

Release changelogs

ASP.NET Core: 8.0.16 | 9.0.5
Entity Framework Core: 9.0.5
Runtime: 8.0.16 | 9.0.5
SDK: 8.0.16 | 9.0.5

Share feedback about this release in the Release feedback issue.

.NET Framework May 2025 Updates

This month, there are no new security and non-security updates. For recent .NET Framework servicing updates, be sure to browse our release notes for .NET Framework for more details.