Sign in with Microsoft
Sign in or create an account.
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.

View products that this article applies to.

This update resolves a vulnerability in the Microsoft .NET Framework that could bypass the Address Space Layout Randomization (ASLR) security feature if a user goes to a specially crafted website.


Microsoft has released security bulletin MS14-046. Learn more about how to obtain the fixes that are included in this security bulletin:


How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

Known issues with this security update

  • After you install security update 2966827 (described in Microsoft Security Bulletin MS14-046) for the Microsoft .NET Framework 3.5, and then you try to enable the Microsoft .NET Framework 3.5 optional feature in Windows Features for the very first time, the feature may not install. You may notice this failure if you "stage" the installation before you add the Microsoft .NET Framework 3.5 feature.

    To resolve this issue, install update 3005628.

    For more information about how to work around this issue, click the following article number to view the article in the Microsoft Knowledge Base:

    3002547 Enabling the Microsoft .NET Framework 3.5 optional Windows feature on Windows 8, Windows Server 2012, Windows 8.1, or Windows Server 2012 R2 may fail after you install security update 2966827 or 2966828

More information about this security update

Download information

This update is available for download from the Microsoft Download Center.

Command-line switches for this update

Learn about the various command-line switches that are supported by this Microsoft .NET Framework update.

Restart information

This update does not require a system restart after you apply it unless files that are being updated are locked or are being used.

Update replacement information

This update does not replace any previously released update.

Update removal information

Note We do not recommend that you remove any security update.

To remove this update, use the Programs and Features item in Control Panel.

File information

The English (United States) version of this update installs files that have the attributes that are listed in the following downloadable .csv file. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

The following .csv file is available for download from the Microsoft Download Center:

Download Download the .NET Framework 3.5 on Windows 8 and Windows Server 2012.csv package now.

Applies to

This article applies to the following:

  • Microsoft .NET Framework 3.5 when used with:

    • Windows 8

    • Windows Server 2012

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Was this information helpful?

What affected your experience?
By pressing submit, your feedback will be used to improve Microsoft products and services. Your IT admin will be able to collect this data. Privacy Statement.

Thank you for your feedback!