注意
- 適用於:
- Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework 4.7.2
注意
- 附註:
- 2023年6月15日修訂,修正已知問題為X.509證書的用詞
- 於 2023 年 6 月 20 日修訂,修正了 CVE-2023-32030 的連結
注意
- 提醒Windows Embedded 7 Standard 及 2008 Windows Server R2 SP1 已結束主流支援,現正進行 ESU) 支援 (延長安全更新。
- 自 2020 年 7 月起,此作業系統將不再有可選的非安全版本 (稱為「C」版本) 。 處於延伸支援期間的作業系統每月僅有累積安全性更新 (稱為 "B" 或星期二更新版本)。
- 安裝此更新前,請先確認已安裝如何取得此更新一節所列出的必要更新。
- 已購買 ESU) (擴展安全更新 的客戶,必須遵循 KB4522133 程序,於延長支援於 2020 年 1 月 14 日結束後繼續接收安全更新。 有關 ESU 以及支援哪些版本的詳細資訊,請參閱 KB4497181。 欲了解更多資訊,請參閱 ESU部落格。
注意
- 提醒所有.NET Framework 4.7.2、4.7.1、4.7、4.6.2、4.6.1 和 4.6 的更新都要求安裝 d3dcompiler_47.dll 更新。 我們建議您在套用此更新之前,先安裝隨附的 d3dcompiler_47.dll 更新。 如需有關 d3dcompiler_47.dll 的詳細資訊,請參閱 KB 4019990。
- 如果您在安裝此更新之後安裝語言套件,您必須重新安裝此更新。 因此,我們建議您在安裝此更新前,先安裝任何需要的語言套件。 如需詳細資訊,請參閱將語言套件新增到 Windows (英文)。
2023 年 6 月 13 日針對 Windows Embedded 7 Standard 及 Windows Server 2008 R2 SP1 和 Windows Server 2008 SP2 的更新,包含了 .NET Framework 4.6.2、4.7、4.7.1、4.7.2 的累積安全性與可靠性改進。 建議您套用此更新,做為定期例行維護。 安裝此更新前,請先確認已安裝如何取得此更新一節所列出的必要更新。
摘要
安全改進
CVE-2023-24897 - .NET Framework 遠端程式碼執行漏洞
此安全更新修正了 MSDIA SDK 中的一個漏洞,該漏洞導致損壞的 PDB 可能導致堆積溢位,進而當機或移除程式碼執行。 欲了解更多資訊,請參閱 CVE-2023-24897。
CVE-2023-24895 - .NET Framework 遠端程式碼執行漏洞
此安全更新修正了 WPF XAML 解析器中的一個漏洞,該漏洞中未沙盒解析器可能導致遠端程式碼執行。 欲了解更多資訊,請參閱 CVE-2023-24895。
CVE-2023-24936 - .NET Framework 權限提升漏洞
此安全更新修正了從 XML 反序列化 DataSet 或 DataTable 時繞過限制的漏洞,導致權限提升。 欲了解更多資訊,請參閱 CVE-2023-24936。
CVE-2023-29331 - .NET Framework 拒絕服務漏洞
此安全更新針對一個漏洞進行,即客戶端憑證的 AIA 取用過程可能導致拒絕服務。 欲了解更多資訊,請參閱 CVE 2023-29331。
CVE-2023-32030 - .NET Framework 拒絕服務漏洞
此安全更新針對 X509Certificate2 檔案處理可能導致拒絕服務的漏洞進行修正。 欲了解更多資訊,請參閱 CVE-2023-32030。
品質與可靠性提升
| WPF1 | - 解決一個問題,以避免當 ControlTemplate 有兩個或以上 ItemsPresenter 共用單一 ItemsCollection 時,發生 ArgumentOutOfRangeException。 - 當工具提示可見屬性被覆寫為永遠為假時,處理空參考例外。 - 解決了使用 ControlTemplate.Triggers 中 TextBox 與 RichTextBox 的 IsReadOnly 屬性會拋出例外的問題。 - 解決基於 WPF 應用程式呈現 XPS 文件的問題。 欲了解更多相關資訊,請參見 KB5022083。 |
|---|---|
| SQL 連線能力 | - 解決當此錯誤發生或在用戶端應用程式洩漏時,函式庫未終止 SQL 連線的問題。 |
1 Windows Presentation Foundation (WPF)
此更新的其他相關資訊
下列文章包含此更新 (與個別產品版本相關) 的其他資訊。
- 5027543 2008 SP2 (KB5027543) .NET Framework 2.0、3.0、4.6.2 的安全與品質整合說明Windows Server
- 5027540 Windows Embedded 7 Windows Server Standard 及 2008 R2 SP1 (KB5027540) .NET Framework 3.5.1、4.6.2、4.7.1、4.7.1、4.7.2、4.8 的安全與品質整合說明
此更新中的已知問題
| 徵兆 | 此更新可能影響 .NET Framework 執行環境匯入 X.509 憑證的方式。 欲了解更多相關資訊,請參見 KB5025823 |
|---|---|
| 因應措施 | 為了緩解此問題,請參見 KB5025823。 |
如何取得此更新
安裝此更新之前
先決條件:
若要套用此更新,您必須已安裝 .NET Framework 4.6.2、4.7、4.7.1、4.7.2。
在安裝最新彙總套件之前,您必須先安裝下列更新並重新啟動您的裝置。 安裝這些更新有助於在安裝彙總套件和套用 Microsoft 安全性修正程式時,提高更新程序的可靠性並防範潛在問題。
| 作業系統 | 安裝此更新的前提條件 |
|---|---|
| Windows Server 2008 SP2 |
|
| Windows Embedded 7 Standard 與 Windows Server 2008 R2 |
|
安裝此更新
| 發行管道 | 可取得 | 下一步 |
|---|---|---|
| Windows Update 和 Microsoft Update | 是 | 無。 如果您是 ESU 客戶,此更新將從 Windows Update 自動下載並安裝。 |
| Microsoft Update Catalog | 是 | 若要取得此更新的獨立套件,請前往 Microsoft Update Catalog 網站。 |
| Windows Server Update Services (WSUS) | 是 | 此個別 .NET Framework 產品更新將依適用作業系統更新安裝。 欲了解更多作業系統更新資訊,請參閱此更新章節的 額外資訊 。 |
重新啟動需求
如果使用任何受影響的檔案,您可能需要在套用此更新後將電腦重新開機。 建議您在套用此更新之前,先結束所有 .NET Framework 應用程式。
更新部署資訊
如需有關此安全性更新的詳細部署資訊,請參閱 Microsoft 知識庫中的下列文章:
20230613 安全更新部署資訊:2023年6月13日
更新取代資訊
此更新取代先前發布的 KB5022731 和 KB5022734 更新。
檔案資訊
此軟體更新的英文 (美國) 版會安裝具有下表中所列屬性的檔案。
| x86 |
|---|
| 檔案名稱檔案 版本檔案 sizeDateTimeAspnet_perf.dll4.7.3930.035,72013-May-202301:34aspnet_wp.exe4.7.3930.039,31213-May-202301:34clr.dll4. 7.4050.07,773,57613-May-202300:17clrjit.dll4.7.4050.0517,01613-May-202300:17dfdll.dll4.7.3221.0159,95213-May-202301:34diasymreader.dll14.7.4050.01,067,92813-May-202300:17GlobalUserInterface.CompositeFont186,00912-May-202323:55mscordacwks.dll4.7.4050.01,336,75213-May-202300:17mscordbi.dll4.7.4050.01,162,61613-2023年5月00:17mscoreei.dll4.7.3468.0512,48813-May-202301:34mscorlib.dll4.7.4050.05,704,60013-May-202300:17mscorsvc.dll4. 7.3771.0424,82413-May-202301:34mscorsvw.exe4.7.3771.0100,80013-May-202301:34msvcp120_clr0400.dll12.0.52519.0485,57613-May-202300:17msvcr120_clr0400.dll12.0.52519.0987,84013-May-202300:17ngen.exe4.7.3771.0135,14413-May-202301:34VsVersion.dll14.7.4050.013,20813-May-202300:17peverify.dll4.7.4050.0182,70413-May-202300:17PresentationCore.dll4.7.4050.03,638,16013-May-202300: 17PresentationFramework.dll4.7.4050.06,269,88812-May-202323:55PresentationFramework-SystemData.dll4.7.4050.018,32812-May-202323:55PresentationHost_v0400.dll4.7.4050.0208,28013-May-202300:17PresentationHost_v0400.dll.mui4.7.4050.078,74413-May-202300:17PresentationNative_v0400.dll4.7.4050.0821,14413-May-202300:17ReachFramework.dll4.7.3570.0677,65613-May-202301:34ServiceMonikerSupport.dll4.7.3620.030,19213-May-202301:34SMDiagnostics.dll4.7.3620.074,84013-May-202301:34SMSvcHost.exe4.7.3515.0139,26413-May-202301: 34SOS.dll4.7.4050.0737,19213-May-202300:17System.Speech.dll4.7.3650.0675,72013-May-202301:34System.Activities.dll4.7.3620.01,534,00813-May-202301:34System.ComponentModel.DataAnnotations.dll4.7.3221.0127,40013-May-202301:34System.Core.dll4.7.4050.01,547,12012-May-202323:55System.Data.Entity.dll4.7.3221.04,035,66413-May-202301:34System.DirectoryServices.AccountManagement.dll4.7.3221.0297,64813-May-202301:: 34System.IdentityModel.dll4.7.3620.01,095,73613-May-202301:34System.IdentityModel.Services.dll4.7.3620.0199,16013-May-202301:34System.Printing.dll4.7.3570.0374,03213-May-202301:34System.Runtime.Serialization.dll4.7.3620.01,057,33613-May-202301:34System.ServiceModel.Channels.dll4.7.3620.0158,70413-May-202301:34System.ServiceModel.Discovery.dll4.7.3620.0309,23213-May-202301:34System.ServiceModel.dll4.7.3620.06,324,79213-May-202301: 34System.ServiceModel.Internals.dll4.7.3620.0261,68813-May-202301:34System.ServiceModel.Routing.dll4.7.3221.0132,20813-May-202301:34System.ServiceModel.WasHosting.dll4.7.3620.040,94413-May-202301:34System.Web.ApplicationServices.dll4.7.3930.064,83213-May-202301:34System.Web.Extensions.dll4.7.3930.01,842,96813-May-202301:34System.Workflow.Activities.dll4.7.3570.01,052,13613-May-202301:34System.Workflow.ComponentModel.dll4.7.3570.01,553,89613-May-202301: 34System.Workflow.Runtime.dll4.7.3570.0499,48013-May-202301:34System.Runtime.Caching.dll4.7.3221.0109,86413-May-202301:34System.Configuration.dll4.7.3630.0420,51213-May-202301:34System.Data.dll4.7.4050.03,468,18413-May-202300:00System.Data.SqlXml.dll4.7.3221.0734,52013-May-202301:34System.Deployment.dll4.7.3221.0879,40813-May-202301:34System.DirectoryServices.dll4.7.3946.0418,14413-May-202301:34System.DirectoryServices.Protocols.dll4.7.3221.0201,62413-May-202301:34System.dll4.7.4050.03,559,73612-May-202323:55System.Drawing.dll4.7.3221.0600,86413-May-202301:34System.Management.dll4.7.3221.0415,53613-May-202301:34System.Net.Http.dll4.7.3221.0204,58413-May-202301:34System.Runtime.Remoting.dll4.7.3221.0347,47213-May-202301:34System.Security.dll4.7.3701.0318,71213-May-202301:34System.Transactions.dll4.7.3221.0309,32813-May-202301:34System.Web.dll4.7.3930.05,411,76013-May-202301:34System.Windows.Controls.Ribbon.dll4.7.4050.0740,28812-May-202323:55System.Windows.Forms.dll4.7.3980.05,237,08813-May-202301:34System.Xaml.dll4.7.4050.0637,24012-May-202323:55System.Xml.dll4.7.3221.02,670,34413-May-202301:34UIAutomationClient.dll4.7.4050.0171,91212-May-202323:55UIAutomationClientsideProviders.dll4.7.4050.0355,26412-May-202323:55UIAutomationProvider.dll4.7.4050.042,94412-May-202323:55UIAutomationTypes.dll4.7.4050.0214,92012-May-202323: 55webengine.dll4.7.3930.018,86413-May-202301:34webengine4.dll4.7.3930.0543,11213-May-202301:34WindowsBase.dll4.7.4050.01,290,12012-May-202323:55WindowsFormsIntegration.dll4.7.4038.0101,79213-May-202301:34WMINet_Utils.dll4.7.3221.0136,43213-May-202301:34WorkflowServiceHostPerformanceCounters.dll4.7.3570.089,88013-May-202301:34WPFFontCache_v0400.exe.mui4.7.4050.013,19213-2023年5月:17WPFFontCache_v0400.exe4.7.4050.019,88813-2023年5月300:17wpfgfx_v0400.dll4.7.4050.01,340,80813-2023年5月300:17Placeholder.dll4.7.4050.018,82413-May-202300:17PenIMC2_v0400.dll4.7.4050.080,28013-2023年5月300:17 |
| x64 |
|---|
| 檔案名稱檔案版本檔案 sizeDateTimeAspnet_perf.dll4.7.3930.040,33613-May-202301:34Aspnet_perf.dll4.7.3930.035,72013-May-202301:34aspnet_wp.exe4.7.3930.044,95213-May-202301:34aspnet_wp.exe4.7.3930.039,31213-May-202301:34clr.dll4.7.4050.010,691,00813-May-202300:17clr.dll4.7.4050.07,773,57613-May-202300:17clrjit.dll4.7.4050.01,215,42413-May-202300:17clrjit.dll4.7.4050.0517,01613-May-202300:17compatjit.dll4.7.4050.01,253,82413-May-202300:17dfdll.dll4.7.3221.0191,69613-May-202301:34dfdll.dll4.7.3221.0159,95213-May-202301:34diasymreader.dll14.7.4050.01,452, 99213-May-202300:17diasymreader.dll14.7.4050.01,067,92813-May-202300:17GlobalUserInterface.CompositeFont186,00912-May-202323:55mscordacwks.dll4.7.4050.01,834,40813-May-202300:17mscordacwks.dll4.7.4050.01,336,75213-May-202300:17mscordbi.dll4.7.4050.01,615,79213-May-202300:17mscordbi.dll4.7.4050.01,162,61613-May-202300:17mscoreei.dll4.7.3468.0631,27213-May-202301:34mscoreei.dll4.7.3468.0512,48813-May-202301:34mscorlib.dll4.7.4050.05,488,05613-May-202300:17mscorslib.dll4.7.4050.05,704,60013-May-202300:17mscorsvc.dll4.7.3771.0538,00013-May-202301:34mscorsvc.dll4.7.3771.0424,82413-May-202301:34mscorsvw.exe4.7.3771.0121,76813-May-202301:34mscorsvw.exe4.7.3771.0100,80013-May-202301:34msvcp120_clr0400.dll12.0.52519.0690,00813-May-202300:17msvcp120_clr0400.dll12.0.52519.0485,57613-May-202300:17msvcr120_clr0400.dll12.0.52519.0993,63213-May-202300:17msvcr120_clr0400.dll12. 0.52519.0987,84013-May-202300:17ngen.exe4.7.3771.0167,40013-May-202301:34ngen.exe4.7.3771.0135,14413-May-202301:34VsVersion.dll14.7.4050.013,24813-May-202300:17VsVersion.dll14.7.4050.013,20813-May-202300:17peverify.dll4.7.4050.0254,87213-May-202300:17peverify.dll4.7.4050.0182,70413-May-202300:17PresentationCore.dll4.7.4050.03,615,68013-May-202300:17PresentationCore.dll4. 7.4050.03,638,16013-May-202300:17PresentationFramework.dll4.7.4050.06,269,88812-May-202323:55PresentationFramework-SystemData.dll4.7.4050.018,32812-May-202323:55PresentationHost_v0400.dll4.7.4050.0271,80813-May-202300:17PresentationHost_v0400.dll.mui4.7.4050.078,76813-May-202300:17PresentationHost_v0400.dll4.7.4050.0208,28013-May-202300:17PresentationHost_v0400.dll.mui4.7.4050.078,74413-May-202300:17PresentationNative_v0400.dll4.7.4050.01,103,80812-May-202323:55PresentationNative_v0400.dll4.7.4050.0821,14413-May-202300:17ReachFramework.dll4.7.3570.0677,65613-May-202301:34ServiceMonikerSupport.. dll4.7.3620.032,24013-May-202301:34ServiceMonikerSupport.dll4.7.3620.030,19213-May-202301:34SMDiagnostics.dll4.7.3620.074,84013-May-202301:34SMSvcHost.exe4.7.3515.0139,26413-May-202301:34SOS.dll4.7.4050.0865,69613-May-202300:17SOS.dll4.7.4050.0737,19213-May-202300:17System.Speech.dll4.7.3650.0675,72013-2023年5月01日:34System.Activities.dll4.7.3620.01,534,00813-2023年5月1日: 34System.ComponentModel.DataAnnotations.dll4.7.3221.0127,40013-May-202301:34System.Core.dll4.7.4050.01,547,12012-May-202323:55System.Data.Entity.dll4.7.3221.04,035,66413-May-202301:34System.DirectoryServices.AccountManagement.dll4.7.3221.0297,64813-May-202301:34System.IdentityModel.dll4.7.3620.01,095,73613-May-202301:34System.IdentityModel.Services.dll4.7.3620.0199,16013-2023年5月01日:34System.Printing.dll4.7.3570.0374,55213-2023年5月1日: 34System.Printing.dll4.7.3570.0374,03213-May-202301:34System.Runtime.Serialization.dll4.7.3620.01,057,33613-May-202301:34System.ServiceModel.Channels.dll4.7.3620.0158,70413-May-202301:34System.ServiceModel.Discovery.dll4.7.3620.0309,23213-May-202301:34System.ServiceModel.dll4.7.3620.06,324,79213-May-202301:34System.ServiceModel.Internals.dll4.7.3620.0261,68813-May-202301:34System.ServiceModel.Routing.dll4.7.3221.0132,20813-May-202301:34System.ServiceModel.WasHosting.dll4.7.3620.040,94413-May-202301:34System.Web.ApplicationServices.dll4.7.3930.064,83213-May-202301:34System.Web.Extensions.dll4.7.3930.01,842,96813-May-202301:34System.Workflow.Activities.dll4.7.3570.01,052,13613-May-202301:34System.Workflow.ComponentModel.dll4.7.3570.01,553,89613-May-202301:34System.Workflow.Runtime.dll4.7.3570.0499,48013-May-202301:34System.Runtime.Caching.dll4.7.3221.0109,86413-May-202301:34System.configuration.dll4.7.3630.0420,51213-May-202301:34System.Data.dll4.7.4050.03,530,16813-May-202300:17System.Data.dll4.7.4050.03,468,18413-May-202300:00System.Data.SqlXml.dll4.7.3221.0734,52013-May-202301:34System.Deployment.dll4.7.3221.0879,40813-May-202301:34System.DirectoryServices.dll4.7.3946.0418,14413-May-202301:34System.DirectoryServices.Protocols.dll4.7.3221.0201,62413-2023年5月01:34System.dll4.7.4050.03,559,73612-2023年5月23:55System.Drawing.dll4.7.3221.0600,86413-May-202301:34System.Management.dll4.7.3221.0415,53613-May-202301:34System.Net.Http.dll4.7.3221.0204,58413-May-202301:34System.Runtime.Remoting.dll4.7.3221.0347,47213-May-202301:34System.Security.dll4.7.3701.0318,71213-May-202301:34System.Transactions.dll4.7.3221.0311,04813-May-202301:34System.Transactions.dll4.7.3221.0309,32813-May-202301:34System.Web.dll4.7.3930.05,394,32013-May-202301:34System.Web.dll4.7.3930.05,411, 76013-May-202301:34System.Windows.Controls.Ribbon.dll4.7.4050.0740,28812-May-202323:55System.Windows.Forms.dll4.7.3980.05,237,08813-May-202301:34System.Xaml.dll4.7.4050.0637,24012-May-202323:55System.XML.dll4.7.3221.02,670,34413-May-202301:34UIAutomationClient.dll4.7.4050.0171,91212-May-202323:55UIAutomationClientsideProviders.dll4.7.4050.0355,26412-May-202323:55UIAutomationProvider.dll4.7.4050.042,94412-May-202323:55UIAutomationTypes.dll4.7.4050.0214,92012-May-202323: 55webengine.dll4.7.3930.019,33613-May-202301:34webengine.dll4.7.3930.018,86413-May-202301:34webengine4.dll4.7.3930.0661,39213-May-202301:34webengine4.dll4.7.3930.0543,11213-May-202301:34WindowsBase.dll4.7.4050.01,290,12012-May-202323:55WindowsFormsIntegration.dll4.7.4038.0101,79213-May-202301:34WMINet_Utils.dll4.7.3221.0188,14413-May-202301:34WMINet_Utils.dll4.7.3221.0136,43213-May-202301:34WorkflowServiceHostPerformanceCounters.. dll4.7.3570.0101,65613-May-202301:34WorkflowServiceHostPerformanceCounters.dll4.7.3570.089,88013-May-202301:34WPFFontCache_v0400.exe.mui4.7.4050.013,24813-May-202300:17WPFFontCache_v0400.exe.mui4.7.4050.013,19213-May-202300:17WPFFontCache_v0400.exe4.7.4050.020,96013-May-202300:17WPFFontCache_v0400.exe4.7.4050.019,88813-May-202300:17wpfgfx_v0400.dll4.7.4050.01,760,70413-May-202300:17wpfgfx_v0400.dll4.7.4050.01,340,80813-2023年5月00:17Placeholder.dll4.7.4050.019,88813-May-202300:17Placeholder.dll4.7.4050.018,82413-May-202300:17PenIMC2_v0400.dll4.7.4050.098,75213-May-202300:17PenIMC2_v0400.dll4.7.4050.080,28013-May-202300:17 |
如何取得此更新的說明及支援
- 安裝更新的幫助:Windows Update 常見問題
- 保護自己在線上與居家:Windows 安全性支援
- 根據你所在國家的在地支持: 國際支持