.NET Framework 3.5 and 4.7.2
.NET Framework 3.5 and 4.8
Denial of service vulnerabilities exist when .NET Framework improperly handles objects in heap memory, or when .NET Framework and .NET Core improperly process RegEx strings.
To learn more about the vulnerabilities, go to the following Common Vulnerabilities and Exposures (CVE).
Additional information about this update
The following articles contain additional information about this update as it relates to individual product versions.
Information about protection and security
Protect yourself online: Windows Security support
Learn how we guard against cyber threats: Microsoft Security