.NET and .NET Framework May 2025 servicing releases updates

Welcome to our combined .NET servicing updates for May 2025. Let’s get into the latest release of .NET & .NET Framework, here is a quick overview of what’s new in our servicing releases:

Security improvements

Security Update

All developers using .NET 8.0 and .NET 9.0 should update immediately due to a spoofing vulnerability in MSBuild (CVE-2025-26646). This affects .NET 8.0 (versions 8.0.1xx and 8.0.4xx) and .NET 9.0 (versions 9.0.1xx through 9.0.3xx), as well as multiple Visual Studio versions. The vulnerability could allow attackers to spoof trusted content, potentially compromising build processes in development and CI/CD environments.

This month you will find that these CVEs have been fixed:

CVE #	Title	Applies to
CVE-2025-26646	.NET and Visual Studio Spoofing Vulnerability	.NET 9.0, .NET 8.0

	.NET 8.0	.NET 9.0
Release Notes	8.0.16	9.0.5
Installers and binaries	8.0.16	9.0.5
Container Images	images	images
Linux packages	8.0.16	9.0.5
Known Issues	8.0	9.0

Release changelogs

ASP.NET Core: 8.0.16 | 9.0.5
Entity Framework Core: 9.0.5
Runtime: 8.0.16 | 9.0.5
SDK: 8.0.16 | 9.0.5

Share feedback about this release in the Release feedback issue.

.NET Framework May 2025 Updates

This month, there are no new security and non-security updates. For recent .NET Framework servicing updates, be sure to browse our release notes for .NET Framework for more details.