Release Date:
September 10, 2019
Version:
.NET Framework 3.5, 4.7.2 and 4.8
Summary
An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locations. An attacker who successfully exploited this vulnerability could write files to folders that require higher privileges than what the attacker already has.
To learn more about the vulnerabilities, go to the following Common Vulnerabilities and Exposures (CVE).
Additional information about this update
The following articles contain additional information about this update as it relates to individual product versions.
Information about protection and security
- Protect yourself online: Windows Security support
- Learn how we guard against cyber threats: Microsoft Security