This update resolves vulnerabilities in the Microsoft .NET Framework. A security vulnerability exists in the .NET Framework which could allow an attacker to access information at rest that should be defended by cryptographic mechanisms. This update fixes the way the Framework handles the key and therefore defends the data at rest. To learn more about the vulnerability, see Microsoft Security Bulletin MS16-155.
Additional information about this security update
The following article contains additional information about this security update as it relates to individual product versions. The article may contain known issue information.
3204801 MS16-155: Description of the Security Only Update for the .NET Framework 4.6.2 for Windows Server 2012: December 13, 2016