← Lark216 Home

Microsoft Update Intelligence

Administrator notices from Microsoft, summarised: what changed, and what you should do.

1Action Required 455Review Recommended
Microsoft Services 1
Product families
Microsoft 365
Clear
Advanced Filters
Informational

Blazor Welcomes Open-Source Contributions from Syncfusion

Blazor now supports open-source contributions from Syncfusion, enhancing the component toolkit and framework.

Developer Tools · .NET Blog Original Microsoft announcement ↗
Details

Original Microsoft text

Microsoft and Syncfusion are collaborating on Blazor through a free, open-source component toolkit, framework contributions, and developer tooling. The post Blazor Welcomes Open-Source Contributions from Syncfusion appeared first on .NET Blog.

Type
Announcements
Tags
.NET Blog, .NET, ASP.NET Core, Blazor, .NET 11, open source, Syncfusion, Syncfusion Toolkit for Blazor
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Developer Tools · verify against the original
Informational

Preparing for Your Next Certification Could Start with Your Visual Studio Subscription

Microsoft encourages IT administrators to consider their Visual Studio subscription for preparing for Microsoft certifications.

Developer Tools · Visual Studio Blog Original Microsoft announcement ↗
Details

Original Microsoft text

Are you thinking about earning a Microsoft certification to help advance your career, build on your existing skills, or meet new requirements at work? If so, you may already be wondering where to start. Which courses, labs, and hands-on exercises will help you prepare? How much time will it take to find the right resources, […] The post Preparing for Your Next Certification Could Start with Your Visual Studio Subscription appeared first on Visual Studio Blog.

Type
Announcements
Tags
Visual Studio Blog, Visual Studio
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Developer Tools · verify against the original
Informational

Blazor Welcomes Open-Source Contributions from Infragistics

Microsoft and Infragistics are collaborating to add open-source components and new .NET 11 analyzers to Blazor.

Developer Tools · .NET Blog Original Microsoft announcement ↗
Details

Original Microsoft text

Microsoft and Infragistics are collaborating on Blazor through free, open-source components, new .NET 11 analyzers, and developer tooling. The post Blazor Welcomes Open-Source Contributions from Infragistics appeared first on .NET Blog.

Type
Announcements
Tags
.NET Blog, .NET, ASP.NET Core, Blazor, .NET 11, Blazor analyzers, Ignite UI, Infragistics, open source
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Developer Tools · verify against the original
Informational

Keep your investigation between sessions

Admins can now start a standalone Markdown note and use the Hot Exit preview to continue work in the next session.

Developer Tools · Visual Studio Blog Original Microsoft announcement ↗
Details

Original Microsoft text

Start a standalone Markdown note and use the opt-in Hot Exit preview to resume unsaved work next session. The post Keep your investigation between sessions appeared first on Visual Studio Blog.

Type
Announcements
Tags
Visual Studio Blog, Visual Studio
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Developer Tools · verify against the original
Review Recommended

.NET October 2026 Out-of-Band Security Updates

Security updates for .NET address two vulnerabilities: Brotli decoder and tarball ownership.

What you should do

Review and apply the security updates to your .NET applications to protect against the vulnerabilities. AI-suggested

Developer Tools · .NET Blog Original Microsoft announcement ↗
Details

Original Microsoft text

Out-of-band security updates for .NET address the Brotli decoder vulnerability and tarball ownership vulnerability. The post .NET October 2026 Out-of-Band Security Updates appeared first on .NET Blog.

Type
Announcements
Tags
.NET Blog, .NET, Maintenance & Updates, Security, .NET 10, .NET 11, .NET 8, .NET 9, CVE-2026-111497
AI analysis
High priority · generated by qwen2.5:7b · possibly affects Developer Tools · verify against the original
Informational

Power Pages: SDK (Software Development Kit)

Power Pages now supports building native mobile applications and kiosks, with GA in March 2027 and a preview available in January 2027.

Developer Tools · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

Build native mobile applications or kioks using Power Pages as the backend foundation with support for authentication, authorization, APIs, data access, and reusable mobile capabilities. GA date: March CY2027 Preview date: January CY2027

Type
M365 Roadmap
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), Power Pages, Web
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Informational

Are You Getting Everything You Can from Your Visual Studio Subscription?

Visual Studio subscribers can access additional benefits like Azure services, learning resources, and pre-built components.

Developer Tools · Visual Studio Blog Original Microsoft announcement ↗
Details

Original Microsoft text

What if you could experiment with a new Azure service without requesting additional budget, prepare for your next technical certification using learning resources you already have, or build a dashboard without creating every UI component from scratch? If you’re a Visual Studio subscriber, you may already have benefits that can help you do all three. Here’s […] The post Are You Getting Everything You Can from Your Visual Studio Subscription? appeared first on Visual Studio Blog.

Type
Announcements
Tags
Visual Studio Blog, Visual Studio
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Developer Tools · verify against the original
Informational

Compare today’s code with an earlier commit

A new feature allows comparing today’s code with an earlier commit without checking out the commit or leaving your branch.

Developer Tools · Visual Studio Blog Original Microsoft announcement ↗
Details

Original Microsoft text

Compare a historical commit with your working tree without checking out the commit or leaving your branch. The post Compare today’s code with an earlier commit appeared first on Visual Studio Blog.

Type
Announcements
Tags
Visual Studio Blog, Visual Studio
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Developer Tools · verify against the original
Informational

Microsoft Purview: Purview SDK embedded in Agent Framework SDK

The Purview SDK is now embedded in the Agent Framework SDK, allowing developers to easily integrate security and compliance features into AI agents.

Developer Tools · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

Purview SDK embedded in Agent Framework SDK enables developers to seamlessly integrate enterprise-grade security, compliance, and governance into the AI agents they build. This integration enables automatic classification and protection of sensitive data, prevents data leaks and oversharing, and provides visibility and control for regulatory compliance—empowering organizations to confidently and securely adopt AI agents in complex environments. GA date: March CY2027 Preview date: November CY2025

Type
M365 Roadmap
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), Microsoft Purview, Web
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Review Recommended

Get Your .NET MAUI App Ready for Xcode 27

Administrators need to prepare their .NET MAUI apps for Xcode 27, which includes using an agent skill and following scene lifecycle changes and manual migration steps.

What you should do

Review the migration steps and use the agent skill to prepare .NET MAUI apps for Xcode 27. AI-suggested

Developer Tools · .NET Blog Original Microsoft announcement ↗
Details

Original Microsoft text

Use an agent skill to prepare your existing .NET MAUI app for Xcode 27, with the scene lifecycle changes and manual migration steps explained. The post Get Your .NET MAUI App Ready for Xcode 27 appeared first on .NET Blog.

Type
Announcements
Tags
.NET Blog, .NET, .NET for iOS, .NET MAUI, Lifecycle, .net maui, .NET MAUI CLI, agent skills, ios
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Developer Tools · verify against the original
Informational

Organize and revisit tabs with the keyboard

New keyboard shortcuts allow reordering and revisiting document tabs in Visual Studio.

Developer Tools · Visual Studio Blog Original Microsoft announcement ↗
Details

Original Microsoft text

Reorder your document tabs and return to them by visual position with new keyboard shortcuts. The post Organize and revisit tabs with the keyboard appeared first on Visual Studio Blog.

Type
Announcements
Tags
Visual Studio Blog, Visual Studio
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Developer Tools · verify against the original
Informational

Microsoft Dataverse: Build your low code hyperscale backend on Dataverse - Build your agentic flows with Dataverse SDK for Python

Microsoft has released the Dataverse SDK for Python, enabling data scientists and developers to build agentic flows and interact with Dataverse data using Python.

Developer Tools · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

The Microsoft Dataverse SDK for Python empowers data scientists and developers to build intelligent, compliant, and scalable agentic flows that integrate seamlessly with Dataverse. In the agentic age, where autonomous agents orchestrate workflows and act on behalf of users, the SDK provides the essential tools to interact programmatically with enterprise data platforms. The SDK supports structured data access, composable APIs, and governance features that are critical for building trustworthy and efficient agents. Key capabilities can include: Autonomous data agents that can query, update, and…

Type
M365 Roadmap
Tags
Launched, General Availability, Preview, Worldwide (Standard Multi-Tenant), Microsoft Dataverse, Web
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Not analysed

Introducing dotnetup: A toolchain manager for .NET

Learn how the new dotnetup tool helps macOS and Linux developers install, manage, and update user-local .NET SDKs and runtimes. The post Introducing dotnetup: A toolchain manager for .NET appeared first on .NET Blog.

Developer Tools · .NET Blog Original Microsoft announcement ↗
Details

Original Microsoft text

Learn how the new dotnetup tool helps macOS and Linux developers install, manage, and update user-local .NET SDKs and runtimes. The post Introducing dotnetup: A toolchain manager for .NET appeared first on .NET Blog.

Type
Announcements
Tags
.NET Blog, .NET, Linux, Maintenance & Updates, daily builds, Developer Tools, dotnet cli, dotnetup, runtimes
Not analysed

Stop waiting on a failed build

Stop solution builds after the first project failure so you can return to fixing the error sooner. The post Stop waiting on a failed build appeared first on Visual Studio Blog.

Developer Tools · Visual Studio Blog Original Microsoft announcement ↗
Details

Original Microsoft text

Stop solution builds after the first project failure so you can return to fixing the error sooner. The post Stop waiting on a failed build appeared first on Visual Studio Blog.

Type
Announcements
Tags
Visual Studio Blog, Visual Studio
Not analysed

New Tools, New Workflows and the Value of the Visual Studio Subscription: What We Learned at VSLive! San Diego

What happens when developers who have spent decades working with Visual Studio start rethinking how they write code, learn new skills, and expand their access to development tools? At VSLive! San Diego, we had an opportunity to find out as

Developer Tools · Visual Studio Blog Original Microsoft announcement ↗
Details

Original Microsoft text

What happens when developers who have spent decades working with Visual Studio start rethinking how they write code, learn new skills, and expand their access to development tools? At VSLive! San Diego, we had an opportunity to find out as developers gathered for five days of technical sessions, hands-on learning, and conversations about Visual Studio, […] The post New Tools, New Workflows and the Value of the Visual Studio Subscription: What We Learned at VSLive! San Diego appeared first on Visual Studio Blog.

Type
Announcements
Tags
Visual Studio Blog, Visual Studio
Not analysed

Announcing .NET 11 Release Candidate 2

.NET 11 Release Candidate 2 is available with improvements across libraries, runtime, SDK, MSBuild, NuGet, F#, ASP.NET Core, .NET MAUI, and Windows Forms. The post Announcing .NET 11 Release Candidate 2 appeared first on .NET Blog.

Developer Tools · .NET Blog Original Microsoft announcement ↗
Details

Original Microsoft text

.NET 11 Release Candidate 2 is available with improvements across libraries, runtime, SDK, MSBuild, NuGet, F#, ASP.NET Core, .NET MAUI, and Windows Forms. The post Announcing .NET 11 Release Candidate 2 appeared first on .NET Blog.

Type
Announcements
Tags
.NET Blog, .NET, .NET MAUI, ASP.NET Core, F#, NuGet, WinForms, .NET 11, Featured
Not analysed

CVE-2026-96303: Microsoft PowerShell Security Feature Bypass Vulnerability

Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.

Developer Tools · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.

Severity
Important · CVSS 6.5
Type
Security updates
Tags
Microsoft PowerShell, Security Feature Bypass, 2026-Oct
Not analysed

CVE-2026-96251: Microsoft PowerShell Remote Code Execution Vulnerability

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.

Developer Tools · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.

Severity
Important · CVSS 8.8
Type
Security updates
Tags
Microsoft PowerShell, Remote Code Execution, 2026-Oct
Not analysed

CVE-2026-96236: ASP.NET Core Denial of Service Vulnerability

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Developer Tools · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Severity
Important · CVSS 7.5
Type
Security updates
Tags
ASP.NET Core, Denial of Service, 2026-Oct
Not analysed

CVE-2026-96231: .NET Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Developer Tools · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Severity
Important · CVSS 7.8
Type
Security updates
Tags
.NET, Elevation of Privilege, 2026-Oct
Not analysed

CVE-2026-96225: .NET Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Developer Tools · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Severity
Important · CVSS 7.8
Type
Security updates
Tags
.NET, Elevation of Privilege, 2026-Oct
Not analysed

CVE-2026-88092: ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.

Developer Tools · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.

Severity
Important · CVSS 9.4
Type
Security updates
Tags
ASP.NET Core, Tampering, 2026-Oct
Not analysed

CVE-2026-70196: ASP.NET Core Denial of Service Vulnerability

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Developer Tools · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Severity
Important · CVSS 5.9
Type
Security updates
Tags
ASP.NET Core, Denial of Service, 2026-Oct
Not analysed

CVE-2026-70194: .NET Framework Security Feature Bypass Vulnerability

Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.

Developer Tools · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.

Severity
Important · CVSS 6.5
Type
Security updates
Tags
.NET Framework, Security Feature Bypass, 2026-Oct
Not analysed

CVE-2026-70188: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

Developer Tools · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

Severity
Important · CVSS 9.1
Type
Security updates
Tags
ASP.NET Core, Security Feature Bypass, 2026-Oct