Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

MS15-118: Security update for the .NET Framework to address elevation of privilege: November 10, 2015


View products that this article applies to.

February 9, 2016 This security update has been rereleased and contains an updated article. We recommend that you apply this updated security update.

↑ Back to the top


Summary

This security update resolves vulnerabilities in the Microsoft .NET Framework. The most severe of these vulnerabilities could allow elevation of privilege if an attacker injects a client-side script into a user's browser. To learn more about the vulnerability, see Microsoft Security Bulletin MS15-118.

↑ Back to the top


More Information

Important

  • All future security and non-security updates for Windows Server 2012 R2, Windows 8.1, Windows RT 8.1, and require update 2919355 to be installed. We recommend that you install update 2919355 on your Windows Server 2012 R2-based, Windows 8.1-based, or Windows RT 8.1-based computer so that you receive future updates.
  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

↑ Back to the top


Additional information about this security update

The following articles contain additional information about this security update as it relates to individual product versions. The articles may contain known-issue information.

Microsoft .NET Framework 4.6 and 4.6.1
  • 3098785  MS15-118: Description of the security update for the .NET Framework 4.6 and 4.6.1 on Windows 8.1 and Windows Server 2012 R2: November 10, 2015 Updated article
  • 3098000 MS15-118: Description of the security update for the .NET Framework 4.6 and 4.6 RC on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: November 10, 2015
  • 3097999 MS15-118: Description of the security update for the .NET Framework 4.6 and 4.6 RC on Windows 8, Windows RT, and Windows Server 2012: November 10, 2015
  • 3098784 MS15-118: Description of the security update for the .NET Framework 4.6 and 4.6 RC on Windows 8 and Windows Server 2012: November 10, 2015
  • 3098001 MS15-118: Description of the security update for the .NET Framework 4.6 and 4.6 RC on Windows 7 SP1, Windows Server 2008 R2 SP1, Windows Vista SP2, and Windows Server 2008 SP2: November 10, 2015
  • 3098786 MS15-118: Description of the security update for the .NET Framework 4.6 and 4.6 RC on Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows Server 2008 R2 SP1: November 10, 2015

Microsoft .NET Framework 4.5, 4.5.1, and 4.5.2
  • 3098779 MS15-118: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: November 10, 2015



    Known issues in this security update
    • You may experience issues when you run .NET Framework applications in the following scenarios:
      • You manually install this security update on a system that has the Microsoft .NET Framework 4.6 installed.
      • You upgrade from the .NET Framework 4.5.1 or 4.5.2 to the .NET Framework 4.6 after you install this security update.
      • You install Visual Studio 2015 after you install this security update.
      For more information, click the following article number to view the article in the Microsoft Knowledge Base:
      3118750 Known issue for security updates 3098779 and 3097997 for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2
  • 3097997 MS15-118: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: November 11, 2015

    Known issues in this security update
    • You may experience issues when you run .NET Framework applications in the following scenarios:
      • You manually install this security update on a system that has the Microsoft .NET Framework 4.6 installed.
      • You upgrade from the .NET Framework 4.5.1 or 4.5.2 to the .NET Framework 4.6 after you install this security update.
      • You install Visual Studio 2015 after you install this security update.
      For more information, click the following article number to view the article in the Microsoft Knowledge Base:
      3118750 Known issue for security updates 3098779 and 3097997 for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2
  • 3098780 MS15-118: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 on Windows 8, Windows RT, and Windows Server 2012 R2: November 10, 2015
  • 3097995 MS15-118: Description of the security update for the .NET Framework 4.5.1 on Windows 8, Windows RT, and Windows Server 2012: November 10, 2015
  • 3097996 MS15-118: Description of the security update for the .NET Framework 4.5.1 on Windows 7 SP1, Windows Server 2008 R2 SP1, Windows Vista SP2, and Windows Server 2008 SP2: November 10, 2015
  • 3098781 MS15-118: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 on Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows Server 2008 R2 SP1: November 10, 2015

Microsoft .NET Framework 4
  • 3098778 MS15-118: Description of the security update for the .NET Framework 4 on Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows Server 2008 R2 SP1: November 10, 2015
  • 3097994 MS15-118: Description of the security update for the .NET Framework 4 on Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows Server 2008 R2 SP1: November 10, 2015

Microsoft .NET Framework 3.5 and 3.5.1
  • 3097989 MS15-118: Description of the security update for the .NET Framework 3.5.1 on Windows 7 SP1 and Windows Server 2008 R2 SP1: November 10, 2015
  • 3097992 MS15-118: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: November 10, 2015
  • 3097991 MS15-118: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: November 10, 2015

Microsoft .NET Framework 2.0
  • 3097988 MS15-118: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: November 10, 2015

↑ Back to the top


Security update deployment information

Windows Vista (all editions)

Reference Table

The following table contains the security update information for this software.
Security update file namesFor Microsoft .NET Framework 2.0 Service Pack 2 on all supported 32-bit editions of Windows Vista:
Windows6.0-KB3097988-x86.msu

For Microsoft .NET Framework 4 on all supported 32-bit editions of Windows Vista:
NDP40-KB3097994-x86.exe
NDP40-KB3098778-x86.exe

For Microsoft .NET Framework 4.5/4.5.1/4.5.2 on all supported 32-bit editions of Windows Vista:
NDP45-KB3097996-x86.exe
NDP45-KB3098781-x86.exe

For Microsoft .NET Framework 4.6 on all supported 32-bit editions of Windows Vista:
NDP46-KB3098001-x86.exe
NDP46-KB3098786-x86.exe

For Microsoft .NET Framework 2.0 Service Pack 2 on all supported x64-based editions of Windows Vista:
Windows6.0-KB3097988-x64.msu

For Microsoft .NET Framework 4 on all supported x64-based editions of Windows Vista:
NDP40-KB3097994-x64.exe
NDP40-KB3098778-x86.exe

For Microsoft .NET Framework 4.5/4.5.1/4.5.2 on all supported x64-based editions of Windows Vista:
NDP45-KB3097996-x64.exe
NDP45-KB3098781-x64.exe

For Microsoft .NET Framework 4.6 on all supported x64-based editions of Windows Vista:
NDP46-KB3098001-x64.exe
NDP46-KB3098786-x64.exe
Installation switchesSee Microsoft Knowledge Base article 2844699
Update log fileFor Microsoft .NET Framework 2.0 Service Pack 2:
Not applicable

For Microsoft .NET Framework 4:

KB3097994_*_*-Microsoft .NET Framework 4 Client Profile-MSP0.txt
KB3097994_*_*.html

KB3098778_*_*-Microsoft .NET Framework 4 Client Profile-MSP0.txt
KB3098778_*_*.html

For Microsoft .NET Framework 4.5/4.5.1/4.5.2:

KB3097996_*_*-Microsoft .NET Framework [.NET target version]-MSP0.txt
KB3097996_*_*.html

KB3098781_*_*-Microsoft .NET Framework [.NET target version]-MSP0.txt
KB3098781_*_*.html

For Microsoft .NET Framework 4.6:

KB3098001_*_*-Microsoft .NET Framework 4.6-MSP0.txt
KB3098001_*_*.html

KB3098786_*_*-Microsoft .NET Framework 4.6-MSP0.txt
KB3098786_*_*.html
Restart requirementThis update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.
Removal informationClick Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File informationSee the individual Knowledge Base articles that are listed in the “Additional information about this security update” section.
Registry key verificationFor Microsoft .NET Framework 2.0 Service Pack 2:
Note A registry key does not exist to validate the presence of this update. Use WMI to detect the presence of this update.

For Microsoft .NET Framework 4 on all supported 32-bit editions of Windows Vista:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4 Client Profile\KB3097994
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4 on all supported 32-bit editions of Windows Vista:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4 Client Profile\KB3098778
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4 on all supported x64-based editions of Windows Vista:

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Updates\Microsoft .NET Framework 4 Client Profile\KB3097994
"ThisVersionInstalled" = "Y"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Updates\Microsoft .NET Framework 4 Client Profile\KB3098778
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4.5/4.5.1/4.5.2:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework [.NET target version]\KB3097996
"ThisVersionInstalled" = "Y"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework [.NET target version]\KB3098781
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4.6:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4.6\KB3098001
"ThisVersionInstalled" = "Y"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4.6\KB 3098786
"ThisVersionInstalled" = "Y"

Windows Server 2008 (all editions)

Reference Table

The following table contains the security update information for this software.
Security update file namesFor Microsoft .NET Framework 2.0 Service Pack 2 on all supported 32-bit editions of Windows Server 2008 Service Pack 2:
Windows6.0-KB3097988-x86.msu

For Microsoft .NET Framework 4 on all supported 32-bit editions of Windows Server 2008 Service Pack 2:
NDP40-KB3097994-x86.exe
NDP40-KB3098778-x86.exe

For Microsoft .NET Framework 4.5/4.5.1/4.5.2 on all supported 32-bit editions of Windows Server 2008 Service Pack 2:
NDP45-KB3097996-x86.exe
NDP45-KB3098781-x86.exe

For Microsoft .NET Framework 4.6 on all supported 32-bit editions of Windows Server 2008 Service Pack 2:
NDP46-KB3098001-x86.exe
NDP46-KB3098786-x86.exe

For Microsoft .NET Framework 2.0 Service Pack 2 on all supported x64-based editions of Windows Server 2008 Service Pack 2:
Windows6.0-KB3097988-x64.msu

For Microsoft .NET Framework 4 on all supported x64-based editions of Windows Server 2008 Service Pack 2:
NDP40-KB3097994-x64.exe
NDP40-KB3098778-x86.exe

For Microsoft .NET Framework 4.5/4.5.1/4.5.2 on all supported x64-based editions of Windows Server 2008 Service Pack 2:
NDP45-KB3097996-x64.exe
NDP45-KB3098781-x64.exe

For Microsoft .NET Framework 4.6 on all supported x64-based editions of Windows Server 2008 Service Pack 2:
NDP46-KB3098001-x64.exe
NDP46-KB3098786-x64.exe

For Microsoft .NET Framework 2.0 Service Pack 2 on all supported Itanium-based editions of Windows Server 2008:
Windows6.0-KB3097988-ia64.msu

For Microsoft .NET Framework 4 on Windows Server 2008 for Itanium-based Systems Service Pack 2:
NDP40-KB3097994-IA64.exe
NDP40-KB3098778-x86.exe
Installation switchesSee Microsoft Knowledge Base article 2844699
Update log fileFor Microsoft .NET Framework 2.0 Service Pack 2:
Not applicable

For Microsoft .NET Framework 4:
KB3097994_*_*-Microsoft .NET Framework 4 Client Profile-MSP0.txt
KB3097994_*_*.html

KB3098778_*_*-Microsoft .NET Framework 4 Client Profile-MSP0.txt
KB3098778_*_*.html

For Microsoft .NET Framework 4.5/4.5.1/4.5.2:

KB3097996_*_*-Microsoft .NET Framework [.NET target version]-MSP0.txt
KB3097996_*_*.html

KB3098781_*_*-Microsoft .NET Framework [.NET target version]-MSP0.txt
KB3098781_*_*.html

For Microsoft .NET Framework 4.6:

KB3098001_*_*-Microsoft .NET Framework 4.6-MSP0.txt
KB3098001_*_*.html

KB3098786_*_*-Microsoft .NET Framework 4.6-MSP0.txt
KB3098786_*_*.html
Restart requirementThis update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.
Removal informationClick Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File informationSee the individual Knowledge Base articles that are listed in the “Additional information about this security update” section.
Registry key verificationFor Microsoft .NET Framework 2.0 Service Pack 2:
Note A registry key does not exist to validate the presence of this update. Use WMI to detect the presence of this update.

For Microsoft .NET Framework 4 on all supported 32-bit editions of Windows Server 2008:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4 Client Profile\KB3097994
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4 on all supported 32-bit editions of Windows Server 2008:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4 Client Profile\KB3098778
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4 on all supported x64-based editions of Windows Server 2008:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Updates\Microsoft .NET Framework 4 Client Profile\KB3097994
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4 on all supported x64-based editions of Windows Server 2008:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Updates\Microsoft .NET Framework 4 Client Profile\KB3098778
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4 on all supported Itanium-based editions of Windows Server 2008:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Updates\Microsoft .NET Framework 4 Client Profile\KB3097994
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4 on all supported Itanium-based editions of Windows Server 2008:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Updates\Microsoft .NET Framework 4 Client Profile\KB3098778
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4.5/4.5.1/4.5.2:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework [.NET target version]\KB3097996
"ThisVersionInstalled" = "Y"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework [.NET target version]\KB3098781
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4.6:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4.6\KB3098001
"ThisVersionInstalled" = "Y"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4.6\KB 3098786
"ThisVersionInstalled" = "Y"

Windows 7 (all editions)

Reference Table

The following table contains the security update information for this software.
Inclusion in Future Service PacksThe update for this issue will be included in a future service pack or update rollup.
Security update file nameFor Microsoft .NET Framework 3.5.1 on all supported 32-bit editions of Windows 7 Service Pack 1:
Windows6.1-KB3097989-x86.msu

For Microsoft .NET Framework 4 on all supported 32-bit editions of Windows 7 Service Pack 1:
NDP40-KB3097994-x86.exe
NDP40-KB3098778-x86.exe

For Microsoft .NET Framework 4.5/4.5.1/4.5.2 on all supported 32-bit editions of Windows 7 Service Pack 1:
NDP45-KB3097996-x86.exe
NDP45-KB3098781-x86.exe

For Microsoft .NET Framework 4.6 on all supported 32-bit editions of Windows 7 Service Pack 1:
NDP46-KB3098001-x86.exe
NDP46-KB3098786-x86.exe

For Microsoft .NET Framework 3.5.1 on all supported x64-based editions of Windows 7 Service Pack 1:
Windows6.1-KB3097989-x64.msu

For Microsoft .NET Framework 4 on all supported x64-based editions of Windows 7 Service Pack 1:
NDP40-KB3097994-x64.exe
NDP40-KB3098778-x64.exe

For Microsoft .NET Framework 4.5/4.5.1/4.5.2 on all supported x64-based editions of Windows 7 Service Pack 1:
NDP45-KB3097996-x64.exe
NDP45-KB3098781-x64.exe

For Microsoft .NET Framework 4.6 on all supported x64-based editions of Windows 7 Service Pack 1:
NDP46-KB3098001-x64.exe
NDP46-KB3098786-x64.exe
Installation switchesSee Microsoft Knowledge Base article 2844699
Update log fileFor Microsoft .NET Framework 3.5.1:
Not applicable.

For Microsoft .NET Framework 4:
KB3097994_*_*-Microsoft .NET Framework 4 Client Profile-MSP0.txt
KB3097994_*_*.html

For Microsoft .NET Framework 4:
KB3098778_*_*-Microsoft .NET Framework 4 Client Profile-MSP0.txt
KB3098778_*_*.html

For Microsoft .NET Framework 4.5/4.5.1/4.5.2:

KB3097996_*_*-Microsoft .NET Framework [.NET target version]-MSP0.txt
KB3097996_*_*.html

For Microsoft .NET Framework 4.5/4.5.1/4.5.2:
KB3098781_*_*-Microsoft .NET Framework [.NET target version]-MSP0.txt
KB3098781_*_*.html

For Microsoft .NET Framework 4.6:

KB3098001_*_*-Microsoft .NET Framework 4.6-MSP0.txt
KB3098001_*_*.html

KB3098786_*_*-Microsoft .NET Framework 4.6-MSP0.txt
KB3098786_*_*.html
Restart requirementThis update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.
Removal informationClick Control Panel, click System and Security, click View installed updates under Windows Update, and then select from the list of updates.
File informationSee the individual Knowledge Base articles that are listed in the “Additional information about this security update” section.
Registry key verificationFor Microsoft .NET Framework 3.5.1:
Note A registry key does not exist to validate the presence of this update. Use WMI to detect the presence of this update.

For Microsoft .NET Framework 4 on all supported 32-bit editions of Windows 7:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4 Client Profile\KB3097994
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4 on all supported 32-bit editions of Windows 7:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4 Client Profile\KB3098778
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4 on all supported x64-based editions of Windows 7:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Updates\Microsoft .NET Framework 4 Client Profile\KB3097994
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4 on all supported x64-based editions of Windows 7:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Updates\Microsoft .NET Framework 4 Client Profile\KB3098778
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4.5/4.5.1/4.5.2:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework [.NET target version]\KB3097996
"ThisVersionInstalled" = "Y"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework [.NET target version]\KB3098781
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4.6:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4.6\KB3098001
"ThisVersionInstalled" = "Y"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4.6\KB3098786
"ThisVersionInstalled" = "Y"

Windows Server 2008 R2 (all editions)

Reference Table

The following table contains the security update information for this software.
Inclusion in Future Service PacksThe update for this issue will be included in a future service pack or update rollup.
Security update file nameFor Microsoft .NET Framework 3.5.1 on all supported x64-based editions of Windows Server 2008 R2 Service Pack 1:
Windows6.1-KB3097989-x64.msu

For Microsoft .NET Framework 4 on all supported x64-based editions of Windows Server 2008 R2 Service Pack 1:
NDP40-KB3097994-x64.exe
NDP40-KB3098778-x64.exe

For Microsoft .NET Framework 4.5/4.5.1/4.5.2 on all supported x64-based editions of Windows Server 2008 R2 Service Pack 1:
NDP45-KB3097996-x64.exe
NDP45-KB3098781-x64.exe

For Microsoft .NET Framework 4.6 on all supported x64-based editions of Windows Server 2008 R2 Service Pack 1:
NDP46-KB3098001-x64.exe
NDP46-KB3098786-x64.exe

For Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for Itanium-based Systems Service Pack 1:
Windows6.1-KB3097989-ia64.msu

For Microsoft .NET Framework 4 on Windows Server 2008 R2 for Itanium-based Systems Service Pack 1:
NDP40-KB3097994-IA64.exe
NDP40-KB3098778-IA64.exe
Installation switchesSee Microsoft Knowledge Base article 2844699
Update log fileFor Microsoft .NET Framework 3.5.1:
Not applicable

For Microsoft .NET Framework 4:
KB3097994_*_*-Microsoft .NET Framework 4 Client Profile-MSP0.txt
KB3097994_*_*.html

KB3098778_*_*-Microsoft .NET Framework 4 Client Profile-MSP0.txt
KB3098778_*_*.html

For Microsoft .NET Framework 4.5/4.5.1/4.5.2:

KB3097996_*_*-Microsoft .NET Framework [.NET target version]-MSP0.txt
KB3097996_*_*.html

For Microsoft .NET Framework 4.5/4.5.1/4.5.2:
KB3098781_*_*-Microsoft .NET Framework [.NET target version]-MSP0.txt
KB3098781_*_*.html

For Microsoft .NET Framework 4.6:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4.6\KB3098001
"ThisVersionInstalled" = "Y"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4.6\KB3098786
"ThisVersionInstalled" = "Y"
Restart requirementThis update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.
Removal informationClick Control Panel, click System and Security, click View installed updates under Windows Update, and then select from the list of updates.
File informationSee the individual Knowledge Base articles that are listed in the “Additional information about this security update” section.
Registry key verificationFor Microsoft .NET Framework 3.5.1:
Note A registry key does not exist to validate the presence of this update. Use WMI to detect the presence of this update.

For Microsoft .NET Framework 4:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Updates\Microsoft .NET Framework 4 Client Profile\KB3097994
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Updates\Microsoft .NET Framework 4 Client Profile\KB3098778
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4.5/4.5.1/4.5.2:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework [.NET target version]\KB3097996
"ThisVersionInstalled" = "Y"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework [.NET target version]\KB3098781
"ThisVersionInstalled" = "Y"

For Microsoft .NET Framework 4.6:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4.6\KB3098001
"ThisVersionInstalled" = "Y"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4.6\KB3098786
"ThisVersionInstalled" = "Y"

Windows 8 and Windows 8.1 (all editions)

Reference Table

The following table contains the security update information for this software.
Inclusion in Future Service PacksThe update for this issue will be included in a future service pack or update rollup.
Security update file nameFor Microsoft .NET Framework 3.5 on Windows 8 for 32-bit Systems:
Windows8-RT-KB3097991-x86.msu

For Microsoft .NET Framework 4.5/4.5.1/4.5.2 on Windows 8 for 32-bit Systems:
Windows8-RT-KB3097995-x86.msu
Windows8-RT-KB3098780-x86.msu

For Microsoft .NET Framework 4.6 on Windows 8 for 32-bit Systems:
Windows8-RT-KB3097999-x86.msu
Windows8-RT-KB3098784-x86.msu

For Microsoft .NET Framework 3.5 on Windows 8 for x64-based Systems:
Windows8-RT-KB3097991-x64.msu

For Microsoft .NET Framework 4.5/4.5.1/4.5.2 on Windows 8 for x64-based Systems:
Windows8-RT-KB3097995-x64.msu
Windows8-RT-KB3098780-x64.msu

For Microsoft .NET Framework 4.6 on Windows 8 for x64-based Systems:
Windows8-RT-KB3097999-x64.msu
Windows8-RT-KB3098784-x64.msu

For Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit Systems:
Windows8.1-KB3097992-x86.msu

For Microsoft .NET Framework 4.5.1/4.5.2 on Windows 8.1 for 32-bit Systems:
Windows8.1-KB3097997-x86.msu
Windows8.1-KB3098779-x86.msu

For Microsoft .NET Framework 4.6 on Windows 8.1 for 32-bit Systems:
Windows8.1-KB3098000-x86.msu
Windows8.1-KB3098785-x86.msu

For Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based Systems:
Windows8.1-KB3097992-x64.msu

For Microsoft .NET Framework 4.5.1/4.5.2 on Windows 8.1 for x64-based Systems:
Windows8.1-KB3097997-x64.msu
Windows8.1-KB3098779-x64.msu

For Microsoft .NET Framework 4.6 on Windows 8.1 for x64-based Systems:
Windows8.1-KB3098000-x64.msu
Windows8.1-KB3098785-x64.msu
Installation switchesSee Microsoft Knowledge Base article 2844699
Restart requirementThis update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.
Removal informationClick Control Panel, click System and Security, click View update history under Windows Update, and then select from the list of updates.
File informationSee the individual Knowledge Base articles that are listed in the “Additional information about this security update” section.
Registry key verificationFor Microsoft .NET Framework 3.5:
Note A registry key does not exist to validate the presence of this update. Use WMI to detect the presence of this update.

For Microsoft .NET Framework 4.5/4.5.1/4.5.2:
Note A registry key does not exist to validate the presence of this update. Use WMI to detect the presence of this update.

For Microsoft .NET Framework 4.6:
Note A registry key does not exist to validate the presence of this update. Use WMI to detect the presence of this update.

Windows Server 2012 and Windows Server 2012 R2 (all editions)

Reference Table

The following table contains the security update information for this software.
Inclusion in Future Service PacksThe update for this issue will be included in a future service pack or update rollup.
Security update file nameFor Microsoft .NET Framework 3.5 on Windows Server 2012:
NDP46-KB3098001-x64.exe

For Microsoft .NET Framework 4.5/4.5.1/4.5.2 on Windows Server 2012:
Windows8-RT-KB3097995-x64.msu
Windows8-RT-KB3098780-x64.msu

For Microsoft .NET Framework 4.6 on Windows Server 2012:
Windows8-RT-KB3097999-x64.msu
Windows8-RT-KB3098784-x64.msu

For Microsoft .NET Framework 3.5 on Windows Server 2012 R2:
Windows8.1-KB3097992-x64.msu

For Microsoft .NET Framework 4.5.1/4.5.2 on Windows Server 2012 R2:
Windows8.1-KB3097997-x64.msu
Windows8.1-KB3098779-x64.msu

For Microsoft .NET Framework 4.6 on Windows Server 2012 R2:
Windows8.1-KB3098000-x64.msu
Windows8.1-KB3098785-x64.msu
Installation switchesSee Microsoft Knowledge Base article 2844699
Restart requirementThis update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.
Removal informationClick Control Panel, click System and Security, click View update history under Windows Update, and then select from the list of updates.
File informationSee the individual Knowledge Base articles that are listed in the “Additional information about this security update” section.
Registry key verificationFor Microsoft .NET Framework 3.5:
Note A registry key does not exist to validate the presence of this update. Use WMI to detect the presence of this update.

For Microsoft .NET Framework 4.5/4.5.1/4.5.2:
Note A registry key does not exist to validate the presence of this update. Use WMI to detect the presence of this update.

For Microsoft .NET Framework 4.6:
Note A registry key does not exist to validate the presence of this update. Use WMI to detect the presence of this update.

Windows RT and Windows RT 8.1 (all editions)

Reference Table

The following table contains the security update information for this software.
DeploymentFor Microsoft .NET Framework 4.5/4.5.1/4.5.2 on Windows RT:
The 3097995 update is available via Windows Update.
The 3098780 update is available via Windows Update.

For Microsoft .NET Framework 4.6 on Windows RT:
The 3097999 update is available via Windows Update.

For Microsoft .NET Framework 4.5.1/4.5.2 on Windows RT 8.1:
The 3097997 update is available via Windows Update.
The 3098779 update is available via Windows Update

For Microsoft .NET Framework 4.6 on Windows RT 8.1:
The 3098000 update is available via Windows Update.
Restart RequirementYes, you must restart your system after you apply this security update.
Removal InformationClick Control Panel, click System and Security, click Windows Update, click Installed updates under See also, and then select from the list of updates.
File InformationSee the individual Knowledge Base articles that are listed in the “Additional information about this security update” section.

Windows 10 (all editions)

Reference Table

The following table contains the security update information for this software.
Security update file nameFor all affected .NET Framework versions on all supported 32-bit editions of Windows 10:
Windows10.0-KB3105213-x86.msu
For all affected .NET Framework versions on all supported x64-based editions of Windows 10:
Windows10.0-KB3105213-x64.msu
Installation switchesSee Microsoft Knowledge Base article 934307
Restart requirementA system restart is required after you apply this security update.
Removal informationTo uninstall an update that is installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, click Windows Update, click Installed updates under See also, and then select from the list of updates.
File informationSee Microsoft Knowledge Base article 3105213
Registry key verificationNote A registry key does not exist to validate the presence of this update.

File hash information
Package NamePackage Hash SHA 1Package Hash SHA 2
Windows6.0-KB3097988-ia64.msu2AF28BB6A63D1E9461C983CB2D93311C3A7295E3EAAB7B479B9D6F89230C1E09D50DA4C9CA9193FB122B2861AE06E27B579711BB
Windows6.0-KB3097988-x64.msu39FAE2882E3795676B267746F125AD9052652290EE3C74AE0F7854A03BD1C7987E40D49EE672D1114F95D0DEF1CCA7E920347E23
Windows6.0-KB3097988-x86.msuA14B0C44A3E1AE64579AC4114F433DFF8B58D113ABD4A70D783392E109069923D1F84B90A5D6BD8042A92CF84ECE94904972A19E
Windows6.1-KB3097989-ia64.msu981115B13DDF632A4C29019DAB27C04ACBD441BEC6659ABE76A0F26387D0CFBE10332DD496D5AC7CD5190B296B5CA67DA8EC1865
Windows6.1-KB3097989-x64.msu4B1EE651904FAD58EC31DD9AA3F6DE89B7577D47F58FD331A3FA32D0E42B6F2F1790F7491AF95FC0EC423E0904C131A7FB70D567
Windows6.1-KB3097989-x86.msu6E8B76304C2A9530929B42676357472C034F06FB91D2E7ACB4C04503159F4F3CE386FC837CB092BF2389C8805E0F283A2002F0DD
Windows8-RT-KB3097991-x64.msuEF2A5F78D877F9B06014113B73E65B8895D2F2AB11872F853F47ECC0E2B224DA1F7A48E47D89D02045895EDFB1B75444ECDF732E
Windows8-RT-KB3097991-x86.msu6241066640F0864EB13498871958A69A43AC57D3D4F1F6995098C479383E214747CB3DA85B238FE677B37BAC99D518603E77666A
Windows8.1-KB3097992-x64.msuDF6C3C9B272EBE747A8DA9CB827FA6B8C475B45CDD5332E21996C56CCB8BEB8DD4747872F4195D8ED804B85DCD24F17EE4167CD0
Windows8.1-KB3097992-x86.msuF390C9B31108E4E3BE1F07C96A3F34CFD3CDF2470632DBE19A7DAF7414724FF93F0DB59360C68F1BBCD813D02E8CF2F5B10E1894
NDP40-KB3097994-IA64.exe09E9DEDC2AC10F1C870EA7F10F12A784A96B44A100BB3783F6313FA843EAB2C6B38E42569F49483355FC73250EBDD43E8C3E3D76
NDP40-KB3097994-x64.exe82412F8C4D509A3E20EF430BC9407FCA69910B3276B1DD56CDF8BCA4E55D31CB6A1BD46846612E7C56A4B085B1C21E8EFAAA95E4
NDP40-KB3097994-x86.exe03B0B3FCDF2F6765846D8506455A9A654024F907BEC5E5854A8FE1091243B4A33B4ED55116313BB89B6ABA8D6532FAFE6ECDCBBD
Windows8-RT-KB3097995-arm.msu47946FA2ECDFDA18123C63D351650982FEAAEB64FE7AA6F1AF98EE7AD7D58097D77EE077133ED33C22F3C280F059E4B06F79F186
Windows8-RT-KB3097995-x64.msuC8983C1894EA6ABBAFCAE5B6C7A9A1EA3A46714718F983F2DEA894E5F2E97D6BF89C92781CE3408728F84211F4F14C29D86AD259
Windows8-RT-KB3097995-x86.msuDFF375B8ECE85D2DAD1CE02FBFFF50AE96D9DCDFACAA762B492FEFBB5B8CF0BCC6BCDCA0B3B7BAC459253CB266C55FDB7303415D
NDP45-KB3097996-x64.exe806921496D45749C631BD52EFEFA8EB98C58754471AE1864F87D594FEB16E043683DF8238E72E736738048B59E7D7F57827B107E
NDP45-KB3097996-x86.exeEBC17E2BF6E2CCF26E82EB37393CBB46979FC9D3BC75BAE731CED433C92E50C3B04449256F49C0614B3C13F531E34F39015AE873
Windows8.1-KB3097997-arm.msuFDF7842258AF47E8F0BA763275250DEEDA6D7883EDEE7D99D33D28B9C5F56997B4DC8978CCAAD01C9D9669D882C2B75CD9C09CA6
Windows8.1-KB3097997-x64.msuAAF2CAB13C492CC688CA6F0CC31BF3EE623493D04117CB0F5F2BC4A9F2F8811531E10E473001E91EBDAA3765DC444B21F82DAA08
Windows8.1-KB3097997-x86.msu7604483B6C845F30975F86E79038B8EEFB4ECE9CFE80B20BBC8C6BEE0D2AD5D5263EADD3D912B3D28766EBE043ECAFE9BB6B9016
Windows8-RT-KB3097999-arm.msuBA5DBE8FD7DF7CB918D8199FB680D67DA583D74C190D52EC5816369C26F6B5F51F536710833FF7F6B7382A6647ECAE83309A09BF
Windows8-RT-KB3097999-x64.msu1478B4BB09F97A32F6ABF1EE4C6E1EFC44AF740000B6610E131E1182C614D10542A563FE6B9BCC2B7ACBD73FB941190D99D89D9A
Windows8-RT-KB3097999-x86.msu9BB10B6DE59B9AFB9110EB294E3A29140DA29348ED202207DC7BADDF7C34BF0DB0F144FDBDB2381212628CEC2976CAF578664D94
Windows8.1-KB3098000-arm.msu89F1C1B46C477D1B2D2893F1E87DFD56CF2ABD2BA407562B5CC649EA1193AE28496A79508E2A7C5D01CDACC402511085E49FBB4C
Windows8.1-KB3098000-x64.msu3C1721A0433C3BF6FF5C606AD36E4626BD1E3925DC75B300F341E7B53CCA37561B0DECA4BD015AB7BC368A1C8A8F416F5782D70F
Windows8.1-KB3098000-x86.msu2D081765E11C8EDE63CE8ECB099AD66234F3C1432E6A7F8EF2789A78DF628070748BE3894B40DAD2A93B962DFF687BEDDA0E335B
NDP46-KB3098001-x64.exe094A1D68C0DC59FC6AE5505AAAB4BE198625F0F509C087CF1E112AE261A9686C3ABD13EB62E1CA306C81554816289243A67BDF86
NDP46-KB3098001-x64.exe6BC91FB7A58EB2F089356C52E55404F43B97BF5A840EF812920BF8594C713EC5EF0B4247CCF3ED36B6747F6C91A4D2A6BBECDA08
NDP46-KB3098001-x86.exe6BF68FF3C1DA519A1B8E3846990A73D2E1C90DC33FC8175731B5524373CA7A66C8030F1D743498895A3D5577DE3D0FA934E1D78E
NDP46-KB3098001-x86.exeFB742BA4818B24978F6DF139CE92EE8E405DD5353B9C794186CD9287C2B6049ED5A7F185956B430677B5F7548E91A32967F11082
MSIPatchRegFix-AMD64.exe5011CB29B096FB674A4795EE8FC2F7FDAD33863ABA62C33DD90ECC3C945AE4F52EEEB2FA07D2C53FB975263B483D09D80F02230D
MSIPatchRegFix-IA64.exeCB861EAF1F4CDFFAD5F83604C7250CD9EDD9643361867793FC7556B79E5833CC18F493A5611EDE94E0D944575E89BAA76B223A0D
MSIPatchRegFix-X86.exe94A84B80B8B45A1AC53A0E5D085513DA0F099655C83C5EE1D4FBFF5260A7D984471EAF4C6004431C21B4F661018BDB92CC124290
NDP40-KB3098778-IA64.exeE1136507B33446F7FDC5BDD47E1652474B7D8025BF47A8143473659230B698FD12A9D0A30FF31FE1F32BB78A35B0FA8452A9E8AF
NDP40-KB3098778-x64.exeF88FC40C19E91A7C1E86DB2BACBE1D2C28251FC4BCD62FD5802BA2D2EFFD65C97BD781CF4A194AFE15A92B2AECB1CEA822E7DF55
NDP40-KB3098778-x86.exe0CAC0A1D839D5DB8363ADB9D0D0633782E72CD9EAAACF792B9F7596CE9888EDA0A8593DD553B44A0615109FC068E1F96212C43F4
Windows8.1-KB3098779-arm.msu14F2833486E56C70A2BCB9DF0D4CA8E25EDD6C1AFDB79DA01C79EAC98D05575DC00F0E74E11467F697042C23E21A1D4B2A28F5A2
Windows8.1-KB3098779-x64.msuC0320C7DC1040D4B837C9AE643CC5A35296A14411C5806C8D949FE9FCA9D9F798A830BEC13E7274771F7D53B8E9423FAAE9C3ED4
Windows8.1-KB3098779-x86.msu23534B5CABEBD971B7D9990A4C3A345A54661C5EB7748C5C2600C3B703EF52A456B42374EBE731BCA4576E01AB49B2A09DE86580
Windows8-RT-KB3098780-arm.msuE7104E61AC70E37C3F45234BD5474809C34D530781998745D43B314DDB608EC6927753EC5A9502C4F043922136FD29DFEBF2E68E
Windows8-RT-KB3098780-x64.msuC85881D88ABD770A291AD8214E95D90C54B96C307AEC8215041767774D1F038DE623BC7C6CFFFA3414E38B5D00A04319E3102D83
Windows8-RT-KB3098780-x86.msu60ECBF8CD7E8B30DE06FCF31AC21AC47BAED8F38114D361E0B88DD1BFE0D108B3148E5B7234A4765FCF185ADA16317747B46227A
NDP45-KB3098781-x64.exe58803DDF78E057B6F43E44B6B1B2B482441A6EB780D5D4B6B5172B39E1F4ABCD740905F4AFF5CA6FEF8FCE7F0F54468D5C3AE3EC
NDP45-KB3098781-x86.exeBA885F061C719C1EE41999825926438DBB0798327F96477CC70065818408DCCE561CB95943AC08765A19350A218657556C905C66
Windows8-RT-KB3098784-arm.msu79DFEA88425A754A188CA4F7F150FE9FF1468F2D6C5931861FDAF1BCAA22F582483BC123481192DCCD4279E3A89C10049CBF0CB1
Windows8-RT-KB3098784-x64.msu5E3AB52E74840EC46861C145BC6EE043DB8B23C820A9BC3E0B668F07D2822A76B9D59067C75BFE46E7187963B696FEBA5B596C76
Windows8-RT-KB3098784-x86.msu061C2B6FA9EA5D4A62E8CF8B05767930B73A80F938973DB8573A9647FE7715999998D07201685382B6FABE3AA9BA15D9B137E3B5
Windows8.1-KB3098785-arm.msuBEDCE22A97870C45D19885C3ECC9399B2014518773FD63E9B9FB847A69A06B572D33BF7F920B9D072840C06AD57CC6E54A802623
Windows8.1-KB3098785-x64.msu9B4AEE824E284CD9284B23FD4B8CB118BB98D75CDA48E39C07D6B745A893708744AB47C7464AAE6565BA6A96428CFC0DC3584A38
Windows8.1-KB3098785-x86.msu29E9A888E3D589D26E4440104BBB882F32D19EF0D618E32ADA4ED0B8245BDF2AA9408DCCD3EE436AFE2F0BDD2C729995B01E15CC
NDP46-KB3098786-x64.exeA0D5008A7455C75F0A918A576816F8A095F190BFFE460522909382F2144AD39B6B413EC8AF306744582B014B67489533B48E1BE5
NDP46-KB3098786-x86.exeB79B9C5F4C15D0C69C86D2E8D5DA6FBE8732570E8D4C8C3B17B56E892B7F485EC1CF47C394F0AB38A3F3A4CAFFBC9C492960CD18

How to obtain help and support for this security update
Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

↑ Back to the top



Applies to

This article applies to the following:
  • Microsoft .NET Framework 4.6 RC, 4.6, and 4.6.1 when used with: 
    • Windows 10
    • Windows Server 2012 R2
    • Windows RT 8.1
    • Windows 8.1
    • Windows Server 2012
    • Windows RT
    • Windows 8
    • Windows Server 2008 R2 Service Pack 1
    • Windows 7 Service Pack 1
    • Windows Server 2008 Service Pack 2
    • Windows Vista Service Pack 2
  • Microsoft .NET Framework 4.5.2 when used with:
    • Windows Server 2012 R2
    • Windows 8.1
    • Windows RT 8.1
    • Windows Server 2012
    • Windows 8
    • Windows RT
    • Windows Server 2008 R2 Service Pack 1
    • Windows 7 Service Pack 1
    • Windows Server 2008 Service Pack 2
    • Windows Vista Service Pack 2
  • Microsoft .NET Framework 4.5.1 when used with:
    • Windows Server 2012 R2
    • Windows 8.1
    • Windows RT 8.1
    • Windows Server 2012
    • Windows 8
    • Windows RT
    • Windows Server 2008 R2 Service Pack 1
    • Windows 7 Service Pack 1
    • Windows Server 2008 Service Pack 2
    • Windows Vista Service Pack 2
  • Microsoft .NET Framework 4.5 when used with:
    • Windows Server 2012
    • Windows 8
    • Windows RT
  • Microsoft .NET Framework 4 when used with:
    • Windows Server 2008 R2 Service Pack 1
    • Windows 7 Service Pack 1
    • Windows Server 2008 Service Pack 2
  • Microsoft .NET Framework 3.5.1 when used with:
    • Windows Server 2008 R2 Service Pack 1
    • Windows 7 Service Pack 1
  • Microsoft .NET Framework 3.5 when used with:
    • Windows 10
    • Windows Server 2012 R2
    • Windows 8.1
    • Windows Server 2012
    • Windows 8
  • Microsoft .NET Framework 2.0 Service Pack 2 when used with:
    • Windows Server 2008 Service Pack 2
    • Windows Vista Service Pack 2

↑ Back to the top


Keywords: kbsurveynew, kbsecvulnerability, kbsecurity, kbsecreview, kbsecbulletin, atdownload, kblangall, kbfix, kbexpertiseinter, kbbug, kb, kbmustloc

↑ Back to the top

Article Info
Article ID : 3104507
Revision : 1
Created on : 1/7/2017
Published on : 2/9/2016
Exists online : False
Views : 606