A vulnerability in certain .NET Framework APIs that parse URLs. An attacker who successfully exploits this vulnerability could use it to bypass security logic that's intended to make sure that a user-provided URL belonged to a specific host name or a subdomain of that host name.

July 9, 2024 — KB5039885 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016; May 14, 2024 — KB5037926 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016

Release Channel. Available. Next Step. Windows Update and Microsoft Update. Yes. None. This update will be downloaded and installed automatically from Windows Update.

Release Date: June 17, 2021. Version:.NET Framework 4.8. The June 17, 2021 update for Windows 10, version 1803 includes a reliability improvement in .NET Framework 4.8.

File information. For a list of the files that are provided in this update, download the file information for cumulative update.. Prerequisites. To apply this update, you must have .NET Framework 4.8 installed.

Note On Jan 12, 2020, a live revision was made to this update to remove its supersedence relationship with the October 13, 2020, .NET Framework security updates. If you have already installed this update, the October 13 .NET Framework updates, or any later .NET Framework updates, you do not have to take any action to be up-to-date for the latest .NET Framework security updates.

IMPORTANT. As a reminder to advanced IT administrators, updates to .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2 should only be applied on systems where .NET Framework 3.5 is present and enabled.

4055266 Security and Quality Rollup for the .NET Framework 3.5 SP1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 and 4.7.1 updates for Windows 8.1 Windows RT 8.1 and Windows Server 2012 R2 (KB 4055266). How to obtain and install the update Method 1: Windows Update. This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically.

July 9, 2019 — KB4506989 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1803

WCF 1 - Added opt-in retry mechanism when configuring listening endpoints on the WCF Activation service to address potential race condition when rapidly restarting an IIS application multiple times while under high CPU load which resulted in an endpoint being inaccessible.