.NET 10 RC 2 Binaries

.NET 10 RC 2 installers and binaries can be downloaded for the following product versions:

• .NET 10.0.0 RC 2
• .NET SDK 10.0.100-rc.2.25502.107

See README.md for .NET 10 release notes and discussions.

The latest .NET releases are always listed at .NET Releases.

Downloads

1. Includes the .NET Runtime and ASP.NET Core Runtime
2. For hosting stand-alone apps on Windows Servers. Includes the ASP.NET Core Module for IIS and can be installed separately on servers without installing .NET Runtime.

The .NET SDK includes a matching updated .NET Runtime. Downloading the Runtime or ASP.NET Core packages is not needed when installing the SDK.

You can check your .NET SDK version by running the following command. The example version shown is for this release.

$ dotnet --version
10.0.100-rc.2.25502.107

.NET Multi-Platform App UI (MAUI) Workload Downloads

After installing the .NET SDK, you can install .NET MAUI using the dotnet workload install command:

dotnet workload install maui

The following workloads are also available to install individually:

dotnet workload install android
dotnet workload install ios
dotnet workload install maccatalyst
dotnet workload install macos
dotnet workload install tvos

Container Images

.NET container images have been updated for this release. The .NET container samples show various ways to use .NET container images.

The following repos have been updated:

• dotnet/sdk
  • docker pull mcr.microsoft.com/dotnet/sdk:10.0-preview
• dotnet/aspnet
  • docker pull mcr.microsoft.com/dotnet/aspnet:10.0-preview
• dotnet/runtime
  • docker pull mcr.microsoft.com/dotnet/runtime:10.0-preview
• dotnet/runtime-deps
  • docker pull mcr.microsoft.com/dotnet/runtime-deps:10.0-preview

Notable Changes

CVE-2025-55315 | .NET Security Feature Bypass Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core 10.0. This advisory also provides guidance on what developers can do to update their applications to address this vulnerability.

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.

CVE-2025-55247 | .NET Denial of Service Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 10.0.xxx. This advisory also provides guidance on what developers can do to update their environments to remove this vulnerability.

A vulnerability exists in .NET where predictable paths for MSBuild's temporary directories on Linux let another user create the directories ahead of MSBuild, leading to DoS of builds. This only affects .NET on Linux operating systems.

Visual Studio Compatibility

If you're on Windows, we recommend installing the latest version of Visual Studio 2026 Insiders. Read more about this new release on the Visual Studio blog and release notes.

You can also use Visual Studio Code and the C# Dev Kit extension with .NET 10.

Feedback

Your feedback is important and appreciated. We've created a discussion at https://github.com/dotnet/core/discussions/categories/news for your questions and comments.

Packages updated in this release