Applies to:

Microsoft .NET Framework 4.8

Summary

Security Improvements

This security update addresses a denial of service vulnerability in .NET Framework. For more information please see CVE-2021-24111.

Quality Improvements

ASP.NET

- Addresses an issue where after installing the update released on October 20th, some ASP.Net applications fail during precompilation – likely with a message that contains the words “Error ASPCONFIG.”

WPF1

- Addresses a hang when scrolling to the end of a TreeView, when layout rounding is enabled and DPI scaling is not 100%.

CLR

- Improves the reliability of automatic Native Image generation task.

1 Windows Presentation Foundation (WPF)

Known issues in this update

Symptom

After installing this update, WPF apps may crash with a callstack similar to

Exception Info: System.NullReferenceException at System.Windows.Interop.HwndMouseInputProvider.HasCustomChrome(System.Windows.Interop.HwndSource, RECT ByRef)
at System.Windows.Interop.HwndMouseInputProvider.GetEffectiveClientRect(IntPtr)
at System.Windows.Interop.HwndMouseInputProvider.PossiblyDeactivate(IntPtr, Boolean)
at System.Windows.Interop.HwndMouseInputProvider.Dispose()

This occurs when disposing an HwndSource whose RootVisual is null, a situation that arises in Visual Studio when docking or splitting windows, and could arise in other apps.

Workaround

To work around this problem, set two AppContext switches using one of the methods described in AppContext Class (System) under the heading “AppContext for library consumers”.  The switches are named Switch.System.Windows.Interop.MouseInput.OptOutOfMoveToChromedWindowFix and Switch.System.Windows.Interop.MouseInput.DoNotOptOutOfMoveToChromedWindowFix and both should be set to “true”.   The first switch avoids the crash, but re-introduces the bug fixed in the KBs.  The second switch is currently ignored, but will be recognized in a future .NET update that contains a fix for the null-reference crash;  it restores the original bug fix.

For example, using the app.config file method to apply the workaround at application scope:

<AppContextSwitchOverrides value="Switch.System.Windows.Interop.MouseInput.OptOutOfMoveToChromedWindowFix=true; Switch.System.Windows.Interop.MouseInput.DoNotOptOutOfMoveToChromedWindowFix=true " />

Additional information about this update

The following articles contain additional information about this update as it relates to individual product versions.

  • 4603003 Description of the Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4603003)

How to obtain and install the update

Before installing this update

Prerequisite:

To apply this update, you must have .NET Framework 4.8 installed.

Install this update

Release Channel

Available

Next Step

Windows Update and Microsoft Update

Yes

None. This update will be downloaded and installed automatically from Windows Update.

Microsoft Update Catalog

Yes

To get the standalone package for this update, go to the Microsoft Update Catalog website.

Windows Server Update Services (WSUS)

Yes

This update will automatically sync with WSUS if you configure Products and Classifications as follows:

Product:Windows Server 2012

Classification: Security Updates

Restart requirement

You must restart the computer after you apply this update if any affected files are being used. We recommend that you exit all .NET Framework-based applications before you apply this update.

Update deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:

20210209 Security update deployment information: February 9, 2021

Update removal information

Note We do not recommend that you remove any security update. To remove this update, use the Programs and Features item in Control Panel.

Update restart information

This update does not require a system restart after you apply it unless files that are being updated are locked or are being used.

Update replacement information

This update replaces previously released updates 4598501 and 4579978.

File Information

File name

File version

File size

Date

Time

Platform

SP requirement

Service branch

Presentationframework-systemdata.dll

4.8.4330.0

17,800

05-Jan-2021

01:30

x86

None

Not applicable

Presentationframework.dll

4.8.4330.0

6,270,336

05-Jan-2021

01:30

x86

None

Not applicable

Reachframework.dll

4.8.4110.0

677,656

04-Dec-2019

02:55

x86

None

Not applicable

Smdiagnostics.dll

4.8.4261.0

66,328

02-Sep-2020

21:05

x86

None

Not applicable

Smsvchost.exe

4.8.4121.0

139,056

07-Dec-2019

06:03

x86

None

Not applicable

System.activities.presentation.dll

4.8.4150.0

2,127,128

09-Jan-2020

19:46

x86

None

Not applicable

System.activities.dll

4.8.4261.0

1,526,528

02-Sep-2020

21:05

x86

None

Not applicable

System.configuration.dll

4.8.4190.0

421,536

05-Jun-2020

05:04

x86

None

Not applicable

System.core.dll

4.8.4330.0

1,549,080

05-Jan-2021

01:30

x86

None

Not applicable

System.deployment.dll

4.8.4290.0

1,593,624

30-Sep-2020

01:40

x86

None

Not applicable

System.drawing.design.dll

4.8.4210.0

125,192

30-Jun-2020

01:55

x86

None

Not applicable

System.identitymodel.services.dll

4.8.4261.0

191,352

02-Sep-2020

21:05

x86

None

Not applicable

System.identitymodel.dll

4.8.4261.0

1,086,744

02-Sep-2020

21:05

x86

None

Not applicable

System.net.sockets.dll

4.8.4121.0

30,360

07-Dec-2019

06:03

x86

None

Not applicable

System.runtime.serialization.dll

4.8.4261.0

1,047,312

02-Sep-2020

21:05

x86

None

Not applicable

System.security.dll

4.8.4261.0

320,280

02-Sep-2020

21:05

x86

None

Not applicable

System.servicemodel.activities.dll

4.8.4261.0

555,384

02-Sep-2020

21:05

x86

None

Not applicable

System.servicemodel.channels.dll

4.8.4261.0

150,904

02-Sep-2020

21:05

x86

None

Not applicable

System.servicemodel.discovery.dll

4.8.4261.0

301,432

02-Sep-2020

21:05

x86

None

Not applicable

System.servicemodel.internals.dll

4.8.4261.0

246,528

02-Sep-2020

21:05

x86

None

Not applicable

System.servicemodel.washosting.dll

4.8.4261.0

33,144

02-Sep-2020

21:05

x86

None

Not applicable

System.servicemodel.web.dll

4.8.4261.0

321,792

02-Sep-2020

21:05

x86

None

Not applicable

System.servicemodel.dll

4.8.4261.0

6,383,896

02-Sep-2020

21:05

x86

None

Not applicable

System.speech.dll

4.8.4210.0

676,736

30-Jun-2020

01:55

x86

SPE

MSIL_SYSTEM.SP

System.web.applicationservices.dll

4.8.4330.0

63,768

05-Jan-2021

01:30

x86

None

Not applicable

System.web.extensions.dll

4.8.4330.0

1,842,448

05-Jan-2021

01:30

x86

None

Not applicable

System.windows.controls.ribbon.dll

4.8.4330.0

743,816

05-Jan-2021

01:30

x86

None

Not applicable

System.windows.forms.datavisualization.dll

4.8.4210.0

1,712,512

30-Jun-2020

01:55

x86

None

Not applicable

System.windows.forms.dll

4.8.4290.0

5,914,880

30-Sep-2020

01:40

x86

None

Not applicable

System.workflow.activities.dll

4.8.4110.0

1,051,112

04-Dec-2019

02:55

x86

None

Not applicable

System.workflow.componentmodel.dll

4.8.4110.0

1,557,272

04-Dec-2019

02:55

x86

None

Not applicable

System.workflow.runtime.dll

4.8.4110.0

503,064

04-Dec-2019

02:55

x86

None

Not applicable

System.xaml.dll

4.8.4330.0

632,088

05-Jan-2021

01:30

x86

None

Not applicable

System.dll

4.8.4311.0

3,552,536

25-Nov-2020

04:49

x86

None

Not applicable

Uiautomationclientsideproviders.dll

4.8.4330.0

354,184

05-Jan-2021

01:30

x86

None

Not applicable

Uiautomationclient.dll

4.8.4330.0

170,880

05-Jan-2021

01:30

x86

None

Not applicable

Uiautomationprovider.dll

4.8.4330.0

41,856

05-Jan-2021

01:30

x86

None

Not applicable

Uiautomationtypes.dll

4.8.4330.0

215,944

05-Jan-2021

01:30

x86

None

Not applicable

Windowsbase.dll

4.8.4330.0

1,298,824

05-Jan-2021

01:30

x86

None

Not applicable

Windowsformsintegration.dll

4.8.4150.0

105,240

09-Jan-2020

19:46

x86

None

Not applicable

Mscorlib.dll

4.8.4311.0

5,670,792

25-Nov-2020

04:49

x86

None

Not applicable

Normidna.nlp

Not applicable

59,342

26-Mar-2020

22:27

Not applicable

None

Not applicable

Normnfc.nlp

Not applicable

47,076

26-Mar-2020

22:27

Not applicable

None

Not applicable

Normnfd.nlp

Not applicable

40,566

26-Mar-2020

22:27

Not applicable

None

Not applicable

Normnfkc.nlp

Not applicable

67,808

26-Mar-2020

22:27

Not applicable

None

Not applicable

Normnfkd.nlp

Not applicable

61,718

26-Mar-2020

22:27

Not applicable

None

Not applicable

Aspnet_perf.dll

4.8.4330.0

36,232

05-Jan-2021

01:30

x86

SPN

X86_NETFX4-ASP

Aspnet_state_perf.h

Not applicable

318

04-Jan-2021

23:56

Not applicable

SPN

X86_NETFX4-ASP

Aspnet_state_perf.ini

Not applicable

42,996

05-Jan-2021

01:31

Not applicable

SPN

X86_NETFX4-ASP

Aspnet_wp.exe

4.8.4330.0

39,824

05-Jan-2021

01:30

x86

SPN

X86_NETFX4-ASP

Clrjit.dll

4.8.4311.0

554,888

25-Nov-2020

04:49

x86

None

Not applicable

Clr.dll

4.8.4311.0

8,037,768

25-Nov-2020

04:49

x86

None

Not applicable

Dfdll.dll

4.8.4290.0

178,040

30-Sep-2020

01:40

x86

None

Not applicable

Globalmonospace.compositefont

Not applicable

26,040

03-Sep-2020

20:09

Not applicable

SPA

X86_NETFX4-GLOBALMONOSP

Globalsansserif.compositefont

Not applicable

26,489

03-Sep-2020

20:09

Not applicable

None

Not applicable

Globalserif.compositefont

Not applicable

29,779

03-Sep-2020

20:09

Not applicable

None

Not applicable

Globaluserinterface.compositefont

Not applicable

264,986

24-Sep-2020

02:17

Not applicable

None

Not applicable

Mscordacwks.dll

4.8.4311.0

1,307,528

25-Nov-2020

04:49

x86

None

Not applicable

Mscordbi.dll

4.8.4311.0

1,188,744

25-Nov-2020

04:49

x86

None

Not applicable

Mscoreei.dll

4.8.4180.0

581,920

26-Mar-2020

23:11

x86

None

Not applicable

Mscorsvc.dll

4.8.4330.0

454,024

05-Jan-2021

01:30

x86

None

Not applicable

Mscorsvw.exe

4.8.4330.0

125,872

05-Jan-2021

01:30

x86

None

Not applicable

Ngentask.exe

4.8.4330.0

79,824

05-Jan-2021

01:30

x86

None

Not applicable

Ngen.exe

4.8.4330.0

144,344

05-Jan-2021

01:30

x86

None

Not applicable

Penimc.dll

14.8.4330.0

11,656

05-Jan-2021

01:30

x86

None

Not applicable

Penimc2_v0400.dll

4.8.4330.0

99,720

05-Jan-2021

01:30

x86

None

Not applicable

Penimc_v0400.dll

4.8.4330.0

18,312

05-Jan-2021

01:30

x86

None

Not applicable

Peverify.dll

4.8.4311.0

182,664

25-Nov-2020

04:49

x86

None

Not applicable

Presentationhost_v0400.dll.mui

4.8.4330.0

77,704

05-Jan-2021

01:30

Not applicable

None

Not applicable

Presentationhost_v0400.dll

4.8.4330.0

233,864

05-Jan-2021

01:30

x86

None

Not applicable

Presentationnative_v0400.dll

4.8.4330.0

923,016

05-Jan-2021

01:30

x86

None

Not applicable

Servicemodel.mof

Not applicable

88,383

08-Nov-2019

23:28

Not applicable

None

Not applicable

Servicemodel.mof.uninstall

Not applicable

896

08-Nov-2019

23:28

Not applicable

None

Not applicable

Servicemonikersupport.dll

4.8.4261.0

24,456

02-Sep-2020

21:05

x86

None

Not applicable

_smsvchostperfcounters.h

Not applicable

702

06-Dec-2019

22:20

Not applicable

None

Not applicable

_smsvchostperfcounters.ini

Not applicable

133,894

07-Dec-2019

06:04

Not applicable

None

Not applicable

_smsvchostperfcounters_d.ini

Not applicable

39

08-Nov-2019

03:11

Not applicable

None

Not applicable

Smsvchost.exe.config

Not applicable

2,262

25-Jul-2019

21:42

Not applicable

None

Not applicable

Sos.dll

4.8.4311.0

767,368

25-Nov-2020

04:49

x86

None

Not applicable

System.core.dll

4.8.4330.0

1,549,080

05-Jan-2021

01:30

x86

None

Not applicable

System.web.extensions.dll

4.8.4330.0

1,842,448

05-Jan-2021

01:30

x86

None

Not applicable

System.windows.forms.datavisualization.dll

4.8.4210.0

1,712,512

30-Jun-2020

01:55

x86

None

Not applicable

Webengine4.dll

4.8.4330.0

564,616

05-Jan-2021

01:30

x86

None

Not applicable

Webengine.dll

4.8.4330.0

19,328

05-Jan-2021

01:30

x86

None

Not applicable

Workflowservicehostperformancecounters.dll

4.8.4110.0

89,368

04-Dec-2019

02:55

x86

None

Not applicable

Wpfgfx_v0400.dll

4.8.4330.0

1,618,824

05-Jan-2021

01:30

x86

None

Not applicable

Globalmonospace.compositefont

Not applicable

26,040

03-Sep-2020

20:09

Not applicable

None

Not applicable

Globalsansserif.compositefont

Not applicable

26,489

03-Sep-2020

20:09

Not applicable

None

Not applicable

Globalserif.compositefont

Not applicable

29,779

03-Sep-2020

20:09

Not applicable

None

Not applicable

Globaluserinterface.compositefont

Not applicable

264,986

24-Sep-2020

02:17

Not applicable

None

Not applicable

Presentationcore.dll

4.8.4330.0

3,673,992

05-Jan-2021

01:30

x86

None

Not applicable

System.data.dll

4.8.4290.0

3,476,360

30-Sep-2020

01:40

x86

None

Not applicable

System.printing.dll

4.8.4110.0

399,640

04-Dec-2019

02:55

x86

None

Not applicable

System.web.dll

4.8.4330.0

5,410,184

05-Jan-2021

01:30

x86

None

Not applicable

Information about protection and security

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Any additional feedback? (Optional)

Thank you for your feedback!

×