Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4514598)


View products that this article applies to.

↑ Back to the top


Summary

An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locations. An attacker who successfully exploited this vulnerability could write files to folders that require higher privileges than what the attacker already has.

To learn more about the vulnerabilities, go to the following Common Vulnerabilities and Exposures (CVE).

Important

  • All updates for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 require that the d3dcompiler_47.dll update is installed. We recommend that you install the included d3dcompiler_47.dll update before you apply this update. For more information about the d3dcompiler_47.dll, see KB 4019990.
  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

↑ Back to the top


Additional information about this update

The following articles contain additional information about this update as it relates to individual product versions.
  • 4514349 Description of the Security Only Update for .NET Framework 3.5 for Windows Server 2012 (KB4514349)
  • 4514342 Description of the Security Only Update for .NET Framework 4.5.2 for Windows Server 2012 (KB4514342)
  • 4514337 Description of the Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 (KB4514337)
  • 4514330 Description of the Security Only Update for .NET Framework 4.8 for Windows Server 2012 (KB4514330)

↑ Back to the top


Information about protection and security

↑ Back to the top


Keywords: kbsurveynew, kbsecvulnerability, kbsecurity, kbsecreview, kbsecbulletin, kbmustloc, kblangall, kbbug, kbexpertiseinter, kb, atdownload, kbSupportTopic, kbContentAuto, Vulnerabilities/exploits/security bulletins, kbfix

↑ Back to the top

Article Info
Article ID : 4514598
Revision : 5
Created on : 9/9/2019
Published on : 9/10/2019
Exists online : False
Views : 217