When you process a malformed XML message that's sent as a message on Service Broker queue in Microsoft SQL Server, an assertion occurs while the metadata is cleaned up.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
About cumulative updates for SQL Server:
Each new cumulative update for SQL Server contains all the hotfixes and all the security fixes that were included with the previous cumulative update. Check out the latest cumulative updates for SQL Server: