Summary

This security update resolves the following vulnerabilities:

  • A "remote code execution" vulnerability exists when .NET Framework does not validate input correctly. An attacker who successfully exploits this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts that have full user rights. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who have administrative user rights. To exploit the vulnerability, an attacker would have to pass specific input to an application through susceptible .NET Framework methods. This security update addresses the vulnerability by correcting how .NET Framework validates input. To learn more about this vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2018-8284.

  • An "elevation of privilege" vulnerability exists in .NET Framework that could allow an attacker to elevate their user rights level. To exploit the vulnerability, an attacker would first have to access the local computer, and then run a malicious program. This update addresses the vulnerability by correcting how .NET Framework enables COM objects. To learn more about this vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2018-8202.

  • A "security feature bypass" vulnerability exists when .NET Framework components do not correctly validate certificates. An attacker could present expired certificates when challenged. This security update addresses the vulnerability by making sure that .NET Framework components correctly validate certificates. To learn more about this vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2018-8356.

Important

  • All updates for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 require the d3dcompiler_47.dll update to be installed. We recommend that you install the included d3dcompiler_47.dll update before you apply this update. For more information about the d3dcompiler_47.dll update, see KB 4019990 for Windows 7 SP1 and Windows Server 2008 R2 SP1. Or, see KB 4019478 for Windows Server 2008.

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Additional information about this security update

For more information about this security update as it relates to Windows 7 SP1 and Windows Server 2008 R2 SP1, see the following article in the Microsoft Knowledge Base:

4340556 Security and Quality Rollup updates for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 7 SP1 and Server 2008 R2 SP1 (KB 4340556)

For more information about this security update as it relates to Windows Server 2008, see the following article in the Microsoft Knowledge Base:

4340559 Security and Quality Rollup updates for .NET Framework 2.0 SP2, 3.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 (KB 4340559)

Known issues

  • After you install any of the July 2018 .NET Framework Security Updates, a COM component fails to load because of “access denied,” “class not registered,” or “internal failure occurred for unknown reasons” errors. The most common failure signature is the following:

    Exception type: System.UnauthorizedAccessException

    Message: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

    For more information about this issue, see the following article in the Microsoft Knowledge Base: 

    4345913 "Access Denied" errors and applications with COM activation fail after installing July 2018 Security and Quality Rollup updates for .NET Framework

    To resolve this issue, install the August Security and Quality Rollup KB 4345590.

  • Assume that you run the Azure Active Directory (Azure AD) Connect Health for Sync monitoring agent on a system that has .NET Framework 4.7.2 or the July 2018 updates for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, or 4.7.2 installed. In this scenario, the system may experience slow performance and high CPU usage.

    For more information about this issue, see the following article in the Microsoft Knowledge Base:

    4457331 Slow performance and high CPU usage in Azure AD Connect Health for Sync monitoring agent on a system that has installed .NET Framework 4.7.2 or the July 2018 updates for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, or 4.7.2

  • After you install the July 2018 .NET Framework Security and Quality Rollups that apply to .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 on Windows 7 Service Pack 1 (SP1), Windows Server 2008 R2 SP1, or Windows Server 2008 SP2, you notice errors in .NET Framework applications.

    For more information about this issue, see the following article in the Microsoft Knowledge Base:

    4463405 Errors occur in applications that combine transaction flow and remote calls after the July 2018 .NET Framework Security and Quality Rollups are installed

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.
 

Method 2: Windows Software Update Services (WSUS)

On your WSUS server, follow these steps:

  1. Click Start, click Administrative Tools, and then click Microsoft Windows Server Update Services 3.0.

  2. Expand ComputerName, and then click Action.

  3. Click Import Updates.

  4. WSUS opens a browser window in which you may be prompted to install an ActiveX control. You must install the ActiveX control to continue.

  5. After the ActiveX control is installed, you see the Microsoft Update Catalog screen. For Windows 7 SP1 and Windows Server 2008 R2 SP1, type 4340556 or for Windows Server 2008, type 4340559 in the Search box, and then click Search.

  6. Locate the .NET Framework packages that match the operating systems, languages, and processors in your environment. Click Add to add them to your basket.

  7. After you select all the packages that you require, click View Basket.

  8. To import the packages to your WSUS server, click Import.

  9. After the packages are imported, click Close to return to WSUS.

The updates are now available for installation through WSUS.

Update deployment information

For deployment details for this security update, see the following article in the Microsoft Knowledge Base:

20180710 Security update deployment information: July 10, 2018

Update removal information

Note We do not recommend that you remove any security update. To remove this update, use the Programs and Features item in Control Panel.

Update restart information

This update does not require a system restart after you apply it unless files that are being updated are locked or are being used.

Update replacement information

For Windows 7 SP1 and Server 2008 R2 SP1, this update replaces KB4099633 and KB4291493.

For Windows Server 2008 SP2, this update replaces KB4099636 and KB4291501.

File information

File hash

Package name

Package hash SHA 1

Package hash SHA 2

NDP46-KB4338420-x64.exe

EEFD3A67DBFB754D713963B1B9888A5E75868882

574BAE313E19EB416117C9E3ADF20B0DA86B66D3D0908C1F2B7C865625141A14

NDP46-KB4338420-x86.exe

50F4CE73B0B99D2D50A16256D9E3ECD5DDA0E398

C786F0AD79BCDF04B8B1CFFFBB73EBF68B07E731DF77E02B0664349902DB70C5


The English (United States) version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

File name

File version

File size

Date

Time

Aspnet_perf.dll

4.7.3130.0

46,240

14-Jun-2018

19:02

Aspnet_perf.dll

4.7.3130.0

42,656

14-Jun-2018

18:45

aspnet_wp.exe

4.7.3130.0

50,792

14-Jun-2018

19:02

aspnet_wp.exe

4.7.3130.0

46,184

14-Jun-2018

18:45

clr.dll

4.7.3130.0

10,377,344

14-Jun-2018

19:02

clr.dll

4.7.3130.0

7,249,024

14-Jun-2018

18:45

clrjit.dll

4.7.3130.0

1,224,336

14-Jun-2018

19:02

clrjit.dll

4.7.3130.0

522,896

14-Jun-2018

18:45

compatjit.dll

4.7.3130.0

1,259,672

14-Jun-2018

19:02

dfdll.dll

4.7.3130.0

191,624

14-Jun-2018

19:02

dfdll.dll

4.7.3130.0

159,880

14-Jun-2018

18:45

GlobalUserInterface.CompositeFont

186,009

14-Jun-2018

18:45

mscordacwks.dll

4.7.3130.0

1,840,800

14-Jun-2018

19:02

mscordacwks.dll

4.7.3130.0

1,343,136

14-Jun-2018

18:45

mscordbi.dll

4.7.3130.0

1,623,704

14-Jun-2018

19:02

mscordbi.dll

4.7.3130.0

1,170,064

14-Jun-2018

18:45

mscoreei.dll

4.7.3130.0

632,464

14-Jun-2018

19:02

mscoreei.dll

4.7.3130.0

513,176

14-Jun-2018

18:45

mscorlib.dll

4.7.3130.0

5,418,136

14-Jun-2018

19:02

mscorlib.dll

4.7.3130.0

5,638,312

14-Jun-2018

18:45

msvcp120_clr0400.dll

12.0.52519.0

690,008

14-Jun-2018

19:02

msvcp120_clr0400.dll

12.0.52519.0

485,576

14-Jun-2018

18:46

msvcr120_clr0400.dll

12.0.52519.0

993,632

14-Jun-2018

19:02

msvcr120_clr0400.dll

12.0.52519.0

987,840

14-Jun-2018

18:46

VsVersion.dll

14.7.3130.0

19,096

14-Jun-2018

19:02

VsVersion.dll

14.7.3130.0

19,096

14-Jun-2018

18:45

peverify.dll

4.7.3130.0

260,760

14-Jun-2018

19:02

peverify.dll

4.7.3130.0

188,568

14-Jun-2018

18:46

PresentationCore.dll

4.7.3130.0

3,613,368

14-Jun-2018

19:02

PresentationCore.dll

4.7.3130.0

3,636,560

14-Jun-2018

18:45

PresentationFramework.dll

4.7.3130.0

6,235,496

14-Jun-2018

18:45

PresentationFramework-SystemData.dll

4.7.3130.0

24,312

14-Jun-2018

18:45

PresentationHost_v0400.dll

4.7.3130.0

277,712

14-Jun-2018

19:02

PresentationHost_v0400.dll.mui

4.7.3130.0

84,704

14-Jun-2018

19:02

PresentationHost_v0400.dll

4.7.3130.0

214,224

14-Jun-2018

18:45

PresentationHost_v0400.dll.mui

4.7.3130.0

84,704

14-Jun-2018

18:45

PresentationNative_v0400.dll

4.7.3130.0

1,109,712

14-Jun-2018

19:02

PresentationNative_v0400.dll

4.7.3130.0

827,096

14-Jun-2018

18:45

ServiceMonikerSupport.dll

4.7.3130.0

31,456

14-Jun-2018

19:02

ServiceMonikerSupport.dll

4.7.3130.0

29,384

14-Jun-2018

18:46

SMDiagnostics.dll

4.7.3130.0

73,808

14-Jun-2018

18:45

SOS.dll

4.7.3130.0

872,064

14-Jun-2018

19:02

SOS.dll

4.7.3130.0

743,552

14-Jun-2018

18:45

System.Activities.dll

4.7.3130.0

1,532,544

14-Jun-2018

18:45

System.ComponentModel.DataAnnotations.dll

4.7.3130.0

127,200

14-Jun-2018

18:45

System.Core.dll

4.7.3130.0

1,551,944

14-Jun-2018

18:45

System.Data.Entity.dll

4.7.3130.0

4,034,240

14-Jun-2018

18:45

System.DirectoryServices.AccountManagement.dll

4.7.3130.0

296,224

14-Jun-2018

18:45

System.IdentityModel.dll

4.7.3130.0

1,090,176

14-Jun-2018

18:45

System.IdentityModel.Services.dll

4.7.3130.0

198,376

14-Jun-2018

18:46

System.Runtime.Serialization.dll

4.7.3130.0

1,056,456

14-Jun-2018

18:45

System.ServiceModel.Channels.dll

4.7.3130.0

157,928

14-Jun-2018

18:45

System.ServiceModel.Discovery.dll

4.7.3130.0

308,456

14-Jun-2018

18:45

System.ServiceModel.dll

4.7.3130.0

6,321,784

14-Jun-2018

18:45

System.ServiceModel.Internals.dll

4.7.3130.0

260,808

14-Jun-2018

18:45

System.ServiceModel.Routing.dll

4.7.3130.0

130,784

14-Jun-2018

18:45

System.ServiceModel.WasHosting.dll

4.7.3130.0

39,656

14-Jun-2018

18:46

System.Web.ApplicationServices.dll

4.7.3130.0

70,840

14-Jun-2018

18:45

System.Web.Extensions.dll

4.7.3130.0

1,849,472

14-Jun-2018

18:46

System.Workflow.Activities.dll

4.7.3130.0

1,051,360

14-Jun-2018

18:46

System.Workflow.ComponentModel.dll

4.7.3130.0

1,542,384

14-Jun-2018

18:46

System.Workflow.Runtime.dll

4.7.3130.0

498,896

14-Jun-2018

18:46

System.Runtime.Caching.dll

4.7.3130.0

109,776

14-Jun-2018

18:46

System.Data.dll

4.7.3130.0

3,520,672

14-Jun-2018

19:02

System.Data.dll

4.7.3130.0

3,458,720

14-Jun-2018

18:45

System.Data.SqlXml.dll

4.7.3130.0

734,320

14-Jun-2018

18:45

System.Deployment.dll

4.7.3130.0

879,232

14-Jun-2018

18:45

System.DirectoryServices.Protocols.dll

4.7.3130.0

201,424

14-Jun-2018

18:45

System.dll

4.7.3130.0

3,554,856

14-Jun-2018

18:45

System.Drawing.dll

4.7.3130.0

600,664

14-Jun-2018

18:45

System.Management.dll

4.7.3130.0

415,336

14-Jun-2018

18:45

System.Net.Http.dll

4.7.3130.0

204,384

14-Jun-2018

18:45

System.Runtime.Remoting.dll

4.7.3130.0

347,280

14-Jun-2018

18:45

System.Security.dll

4.7.3130.0

325,728

14-Jun-2018

18:45

System.Transactions.dll

4.7.3130.0

310,464

14-Jun-2018

19:02

System.Transactions.dll

4.7.3130.0

307,392

14-Jun-2018

18:45

System.Web.dll

4.7.3130.0

5,398,192

14-Jun-2018

19:02

System.Web.dll

4.7.3130.0

5,416,096

14-Jun-2018

18:46

System.Windows.Controls.Ribbon.dll

4.7.3130.0

742,640

14-Jun-2018

18:45

System.Windows.Forms.dll

4.7.3130.0

5,236,864

14-Jun-2018

18:45

System.Xaml.dll

4.7.3130.0

642,120

14-Jun-2018

18:45

System.XML.dll

4.7.3130.0

2,670,144

14-Jun-2018

18:45

UIAutomationClient.dll

4.7.3130.0

178,008

14-Jun-2018

18:45

UIAutomationClientsideProviders.dll

4.7.3130.0

361,360

14-Jun-2018

18:45

UIAutomationProvider.dll

4.7.3130.0

48,992

14-Jun-2018

18:45

UIAutomationTypes.dll

4.7.3130.0

221,016

14-Jun-2018

18:45

webengine.dll

4.7.3130.0

26,264

14-Jun-2018

19:02

webengine.dll

4.7.3130.0

24,752

14-Jun-2018

18:46

webengine4.dll

4.7.3130.0

667,296

14-Jun-2018

19:02

webengine4.dll

4.7.3130.0

550,040

14-Jun-2018

18:46

WindowsBase.dll

4.7.3130.0

1,292,112

14-Jun-2018

18:45

WMINet_Utils.dll

4.7.3130.0

188,072

14-Jun-2018

19:02

WMINet_Utils.dll

4.7.3130.0

136,360

14-Jun-2018

18:45

WorkflowServiceHostPerformanceCounters.dll

4.7.3130.0

101,136

14-Jun-2018

19:02

WorkflowServiceHostPerformanceCounters.dll

4.7.3130.0

89,384

14-Jun-2018

18:45

WPFFontCache_v0400.exe.mui

4.7.3130.0

19,168

14-Jun-2018

20:14

WPFFontCache_v0400.exe.mui

4.7.3130.0

19,152

14-Jun-2018

18:45

WPFFontCache_v0400.exe

4.7.3130.0

26,728

14-Jun-2018

20:14

WPFFontCache_v0400.exe

4.7.3130.0

25,704

14-Jun-2018

18:45

wpfgfx_v0400.dll

4.7.3130.0

1,764,520

14-Jun-2018

19:02

wpfgfx_v0400.dll

4.7.3130.0

1,345,184

14-Jun-2018

18:45

Placeholder.dll

4.7.3130.0

25,760

14-Jun-2018

19:02

Placeholder.dll

4.7.3130.0

24,736

14-Jun-2018

18:45

PenIMC2_v0400.dll

4.7.3130.0

104,616

14-Jun-2018

19:02

PenIMC2_v0400.dll

4.7.3130.0

86,184

14-Jun-2018

18:45

The English (United States) version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

File name

File version

File size

Date

Time

Aspnet_perf.dll

4.7.3130.0

42,656

14-Jun-2018

18:45

aspnet_wp.exe

4.7.3130.0

46,184

14-Jun-2018

18:45

clr.dll

4.7.3130.0

7,249,024

14-Jun-2018

18:45

clrjit.dll

4.7.3130.0

522,896

14-Jun-2018

18:45

dfdll.dll

4.7.3130.0

159,880

14-Jun-2018

18:45

GlobalUserInterface.CompositeFont

186,009

14-Jun-2018

18:45

mscordacwks.dll

4.7.3130.0

1,343,136

14-Jun-2018

18:45

mscordbi.dll

4.7.3130.0

1,170,064

14-Jun-2018

18:45

mscoreei.dll

4.7.3130.0

513,176

14-Jun-2018

18:45

mscorlib.dll

4.7.3130.0

5,638,312

14-Jun-2018

18:45

msvcp120_clr0400.dll

12.0.52519.0

485,576

14-Jun-2018

18:46

msvcr120_clr0400.dll

12.0.52519.0

987,840

14-Jun-2018

18:46

VsVersion.dll

14.7.3130.0

19,096

14-Jun-2018

18:45

peverify.dll

4.7.3130.0

188,568

14-Jun-2018

18:46

PresentationCore.dll

4.7.3130.0

3,636,560

14-Jun-2018

18:45

PresentationFramework.dll

4.7.3130.0

6,235,496

14-Jun-2018

18:45

PresentationFramework-SystemData.dll

4.7.3130.0

24,312

14-Jun-2018

18:45

PresentationHost_v0400.dll

4.7.3130.0

214,224

14-Jun-2018

18:45

PresentationHost_v0400.dll.mui

4.7.3130.0

84,704

14-Jun-2018

18:45

PresentationNative_v0400.dll

4.7.3130.0

827,096

14-Jun-2018

18:45

ServiceMonikerSupport.dll

4.7.3130.0

29,384

14-Jun-2018

18:46

SMDiagnostics.dll

4.7.3130.0

73,808

14-Jun-2018

18:45

SOS.dll

4.7.3130.0

743,552

14-Jun-2018

18:45

System.Activities.dll

4.7.3130.0

1,532,544

14-Jun-2018

18:45

System.ComponentModel.DataAnnotations.dll

4.7.3130.0

127,200

14-Jun-2018

18:45

System.Core.dll

4.7.3130.0

1,551,944

14-Jun-2018

18:45

System.Data.Entity.dll

4.7.3130.0

4,034,240

14-Jun-2018

18:45

System.DirectoryServices.AccountManagement.dll

4.7.3130.0

296,224

14-Jun-2018

18:45

System.IdentityModel.dll

4.7.3130.0

1,090,176

14-Jun-2018

18:45

System.IdentityModel.Services.dll

4.7.3130.0

198,376

14-Jun-2018

18:46

System.Runtime.Serialization.dll

4.7.3130.0

1,056,456

14-Jun-2018

18:45

System.ServiceModel.Channels.dll

4.7.3130.0

157,928

14-Jun-2018

18:45

System.ServiceModel.Discovery.dll

4.7.3130.0

308,456

14-Jun-2018

18:45

System.ServiceModel.dll

4.7.3130.0

6,321,784

14-Jun-2018

18:45

System.ServiceModel.Internals.dll

4.7.3130.0

260,808

14-Jun-2018

18:45

System.ServiceModel.Routing.dll

4.7.3130.0

130,784

14-Jun-2018

18:45

System.ServiceModel.WasHosting.dll

4.7.3130.0

39,656

14-Jun-2018

18:46

System.Web.ApplicationServices.dll

4.7.3130.0

70,840

14-Jun-2018

18:45

System.Web.Extensions.dll

4.7.3130.0

1,849,472

14-Jun-2018

18:46

System.Workflow.Activities.dll

4.7.3130.0

1,051,360

14-Jun-2018

18:46

System.Workflow.ComponentModel.dll

4.7.3130.0

1,542,384

14-Jun-2018

18:46

System.Workflow.Runtime.dll

4.7.3130.0

498,896

14-Jun-2018

18:46

System.Runtime.Caching.dll

4.7.3130.0

109,776

14-Jun-2018

18:46

System.Data.dll

4.7.3130.0

3,458,720

14-Jun-2018

18:45

System.Data.SqlXml.dll

4.7.3130.0

734,320

14-Jun-2018

18:45

System.Deployment.dll

4.7.3130.0

879,232

14-Jun-2018

18:45

System.DirectoryServices.Protocols.dll

4.7.3130.0

201,424

14-Jun-2018

18:45

System.dll

4.7.3130.0

3,554,856

14-Jun-2018

18:45

System.Drawing.dll

4.7.3130.0

600,664

14-Jun-2018

18:45

System.Management.dll

4.7.3130.0

415,336

14-Jun-2018

18:45

System.Net.Http.dll

4.7.3130.0

204,384

14-Jun-2018

18:45

System.Runtime.Remoting.dll

4.7.3130.0

347,280

14-Jun-2018

18:45

System.Security.dll

4.7.3130.0

325,728

14-Jun-2018

18:45

System.Transactions.dll

4.7.3130.0

307,392

14-Jun-2018

18:45

System.Web.dll

4.7.3130.0

5,416,096

14-Jun-2018

18:46

System.Windows.Controls.Ribbon.dll

4.7.3130.0

742,640

14-Jun-2018

18:45

System.Windows.Forms.dll

4.7.3130.0

5,236,864

14-Jun-2018

18:45

System.Xaml.dll

4.7.3130.0

642,120

14-Jun-2018

18:45

System.Xml.dll

4.7.3130.0

2,670,144

14-Jun-2018

18:45

UIAutomationClient.dll

4.7.3130.0

178,008

14-Jun-2018

18:45

UIAutomationClientsideProviders.dll

4.7.3130.0

361,360

14-Jun-2018

18:45

UIAutomationProvider.dll

4.7.3130.0

48,992

14-Jun-2018

18:45

UIAutomationTypes.dll

4.7.3130.0

221,016

14-Jun-2018

18:45

webengine.dll

4.7.3130.0

24,752

14-Jun-2018

18:46

webengine4.dll

4.7.3130.0

550,040

14-Jun-2018

18:46

WindowsBase.dll

4.7.3130.0

1,292,112

14-Jun-2018

18:45

WMINet_Utils.dll

4.7.3130.0

136,360

14-Jun-2018

18:45

WorkflowServiceHostPerformanceCounters.dll

4.7.3130.0

89,384

14-Jun-2018

18:45

WPFFontCache_v0400.exe.mui

4.7.3130.0

19,152

14-Jun-2018

18:45

WPFFontCache_v0400.exe

4.7.3130.0

25,704

14-Jun-2018

18:45

wpfgfx_v0400.dll

4.7.3130.0

1,345,184

14-Jun-2018

18:45

Placeholder.dll

4.7.3130.0

24,736

14-Jun-2018

18:45

PenIMC2_v0400.dll

4.7.3130.0

86,184

14-Jun-2018

18:45

 

How to obtain help and support for this security update

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Thank you for your feedback!

×