Sign in with Microsoft
Sign in or create an account.
Hello,
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.

Applies to:

Microsoft .NET Framework 3.5

REMINDER

  • As a reminder to advanced IT administrators, updates to .NET Framework 3.5 for Windows Server 2012 R2 should only be applied on systems where .NET Framework 3.5 is present and enabled. Customers who attempt to pre-install updates to .NET Framework 3.5 to offline images that do not contain the .NET Framework 3.5 product enabled will expose these systems to failures to enable .NET Framework 3.5 after the systems are online. For more extensive information about deploying .NET Framework 3.5, see Microsoft .NET Framework 3.5 Deployment Considerations.

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

The September 12, 2023 update for Windows Server 2012 R2 includes security improvements in .NET Framework 3.5. We recommend that you apply this update as part of your regular maintenance routines. Verify that you have installed the required updates listed in the How to get this update section before installing this update.

Summary

CVE-2023-36796 - .NET Framework Remote Code Execution Vulnerability
This security update addresses a vulnerability in DiaSymReader.dll when reading a corrupted PDB file which can lead to Remote Code Execution. For more information see CVE 2023-36796.

CVE-2023-36792 - .NET Framework Remote Code Execution Vulnerability
This security update addresses a vulnerability in DiaSymReader.dll when reading a corrupted PDB file which can lead to Remote Code Execution. For more information see CVE-2023-36792.

CVE-2023-36793 - .NET Framework Remote Code Execution Vulnerability
This security update addresses a vulnerability in DiaSymReader.dll when reading a corrupted PDB file which can lead to Remote Code Execution. For more information see CVE-2023-36793.

CVE-2023-36794 - .NET Framework Remote Code Execution Vulnerability
This security update addresses a vulnerability in DiaSymReader.dll when reading a corrupted PDB file which can lead to Remote Code Execution. For more information see CVE-2023-36794.

CVE-2023-36788 - .NET Framework Remote Code Execution Vulnerability
This security update addresses a vulnerability in the WPF XAML parser where an unsandboxed parser can lead to remote code execution. For more information see CVE 2023-36788.

Additional information about this update

The following articles contain additional information about this update as it relates to individual product versions.

  • 5030175 Description of the Security Only Update for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5030175)

Known issues in this update

Microsoft is not currently aware of any issues in this update.

How to get this update

Before installing this update

Prerequisite:

To apply this update, you must have .NET Framework 3.5 installed.

Install this update

Release Channel

Available

Next Step

Windows Update and Microsoft Update

No

See the other options below.

Microsoft Update Catalog

Yes

To get the standalone package for this update, go to the Microsoft Update Catalog website.

Windows Server Update Services (WSUS)

Yes

This individual .NET Framework product update will be installed, as applicable, by applying the operating system update. For more information about operating system updates see additional information about this update section.

Restart requirement

You may need to restart the computer after you apply this update if any affected files are being used. We recommend that you exit all .NET Framework-based applications before you apply this update.

Update deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:

20230912 Security update deployment information: September 12, 2023

File Information

File hash information

File name

SHA256 hash

windows8.1-kb5029940-x64.msu

0F8A4BBF736EB802800DE97631739323831E6409A0DB415AF4C7C8F10E7686EE

windows8.1-kb5029940-x86.msu

F74BD45547923FF4D119102C12EF9CADB2CCB6F1438F337FBF97417919724D68

File name

File version

File size

Date

Time

Platform

Presentationcore.dll

3.0.6920.8957

4,006,400

02-Aug-2023

00:16

x64

Presentationfontcache.exe.config

Not applicable

161

14-May-2023

00:28

Not applicable

Wpfgfx_v0300.dll

3.0.6920.8957

2,259,336

02-Aug-2023

00:16

x64

System.printing.dll

3.0.6920.8957

358,400

02-Aug-2023

00:16

x64

Penimc.dll

3.0.6920.8957

88,984

02-Aug-2023

00:16

x64

Presentationframework.dll

3.0.6920.8957

4,653,056

02-Aug-2023

00:16

x86

Presentationhostdll.dll

3.0.6920.8957

175,496

02-Aug-2023

00:16

x64

Reachframework.dll

3.0.6920.8957

536,576

02-Aug-2023

00:16

x86

Windowsbase.dll

3.0.6920.8957

1,118,208

02-Aug-2023

00:16

x86

Presentationframework.dll

3.0.6920.8957

5,296,128

02-Aug-2023

00:15

x86

Reachframework.dll

3.0.6920.8957

536,576

02-Aug-2023

00:15

x86

Windowsbase.dll

3.0.6920.8957

1,257,472

02-Aug-2023

00:15

x86

Presentationcore.dll

3.0.6920.8957

4,222,976

02-Aug-2023

00:15

x86

Presentationfontcache.exe.config

Not applicable

161

28-Jul-2023

00:27

Not applicable

Wpfgfx_v0300.dll

3.0.6920.8957

1,741,192

02-Aug-2023

00:15

x86

System.printing.dll

3.0.6920.8957

372,736

02-Aug-2023

00:15

x86

Penimc.dll

3.0.6920.8957

72,112

02-Aug-2023

00:15

x86

Presentationframework.dll

3.0.6920.8957

5,296,128

02-Aug-2023

00:15

x86

Presentationhostdll.dll

3.0.6920.8957

134,536

02-Aug-2023

00:15

x86

Reachframework.dll

3.0.6920.8957

536,576

02-Aug-2023

00:15

x86

Windowsbase.dll

3.0.6920.8957

1,257,472

02-Aug-2023

00:15

x86

File name

File version

File size

Date

Time

Platform

Presentationframework.dll

3.0.6920.8957

5,296,128

02-Aug-2023

00:15

x86

Reachframework.dll

3.0.6920.8957

536,576

02-Aug-2023

00:15

x86

Windowsbase.dll

3.0.6920.8957

1,257,472

02-Aug-2023

00:15

x86

Presentationcore.dll

3.0.6920.8957

4,222,976

02-Aug-2023

00:15

x86

Presentationfontcache.exe.config

Not applicable

161

28-Jul-2023

00:27

Not applicable

Wpfgfx_v0300.dll

3.0.6920.8957

1,741,192

02-Aug-2023

00:15

x86

System.printing.dll

3.0.6920.8957

372,736

02-Aug-2023

00:15

x86

Penimc.dll

3.0.6920.8957

72,112

02-Aug-2023

00:15

x86

Presentationframework.dll

3.0.6920.8957

5,296,128

02-Aug-2023

00:15

x86

Presentationhostdll.dll

3.0.6920.8957

134,536

02-Aug-2023

00:15

x86

Reachframework.dll

3.0.6920.8957

536,576

02-Aug-2023

00:15

x86

Windowsbase.dll

3.0.6920.8957

1,257,472

02-Aug-2023

00:15

x86

How to obtain help and support for this update

Facebook LinkedIn Email
SUBSCRIBE RSS FEEDS

Need more help?

Want more options?

Discover Community

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Microsoft 365 subscription benefits

Microsoft 365 training

Microsoft security

Accessibility center

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Ask the Microsoft Community

Microsoft Tech Community

Windows Insiders

Microsoft 365 Insiders

Was this information helpful?

What affected your experience?
By pressing submit, your feedback will be used to improve Microsoft products and services. Your IT admin will be able to collect this data. Privacy Statement.

Thank you for your feedback!

×