Lucene search
MicrosoftKB4578961HistoryOct 13, 2020 - 7:00 a.m.
Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 (KB4578961)
2020-10-1307:00:00
Microsoft
support.microsoft.com
26
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
6.3 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
8.9%
Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 (KB4578961)
**Applies to:**Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework 4.7.2
Summary
Security improvementsAn information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attacker who successfully exploited the vulnerability could disclose contents of an affected system’s memory. To exploit the vulnerability, an authenticated attacker would need to run a specially crafted application. The update addresses the vulnerability by correcting how the .NET Framework handles objects in memory.To learn more about the vulnerabilities, go to the following Common Vulnerabilities and Exposures (CVE).
- CVE-2020-16937
Quality and reliability improvementsSQL| - Addressed a failure that sometimes occured when a user connects to one Azure SQL database, performed an enclave based operation, and then connected to another database under the same server that has the same Attestation URL and performed an enclave operation on the second server.
—|—
CLR1| - Added a CLR config variable Thread_AssignCpuGroups (1 by default) that can be set to 0 to disable automatic CPU group assignment done by the CLR for new threads created by Thread.Start() and thread pool threads, such that an app may do its own thread-spreading.- Addressed a rare data corruption that can occur when using new API’s such as Unsafe.ByteOffset<T> which are often used with the new Span types. The corruption could occur when a GC operation is performed while a thread is calling Unsafe.ByteOffset<T> from inside of a loop.- Addressed an issue regarding timers with very long due times ticking down much sooner than expected when the AppContext switch “Switch.System.Threading.UseNetCoreTimer” is enabled.
ASP.NET| - Disabled resuse of AppPathModifier in ASP.Net control output.- HttpCookie objects in the ASP.Net request context will be created with configured defaults for cookie flags instead of .NET-style primitive defaults to match the behavior ofnew HttpCookie(name).
1 Common Language Runtime (CLR)Important
- All updates for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 require that the d3dcompiler_47.dll update is installed. We recommend that you install the included d3dcompiler_47.dll update before you apply this update. For more information about the d3dcompiler_47.dll, see KB 4019990.
- If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.
Known issues in this security update
Symptoms
After you apply this October 13, 2020 Security and Quality Rollup for .NET Framework 4.8, some ASP.Net applications fail during precompilation. The error message that you receive will likely contain the words “Error ASPCONFIG.”
Cause
An invalid configuration state in either the “sessionState,” “anonymouseIdentification,” or “authentication/forms” sections of “System.web” configuration. This might occur during build-and-publish routines if configuration transformations leave the Web.config file in an intermediate state for precompilation.
WorkaroundThis issue was resolved in KB4600957.
Additional information about this update
The following articles contain additional information about this update as it relates to individual product versions.
- 4579978 Description of the Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4579978)
How to obtain and install the update
| Before installing this updatePrerequisite:**To apply this update, you must have .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 installed.**Install this updateRelease Channel | Available | Next Step |
|---|---|---|
| Windows Update and Microsoft Update | Yes | None. This update will be downloaded and installed automatically from Windows Update. |
| Microsoft Update Catalog | Yes | To get the standalone package for this update, go to the Microsoft Update Catalog website. |
| Windows Server Update Services (WSUS) | Yes | This update will automatically sync with WSUS if you configure Products and Classifications as follows:Product:Windows Server 2012Classification: Security Updates |
Prerequisites
To apply this update, you must have .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 installed.
Restart requirement
You must restart the computer after you apply this update if any affected files are being used. We recommend that you exit all .NET Framework-based applications before you apply this update.
Update deployment information
For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:20201013 Security update deployment information: October 13, 2020
Update removal information
Note We do not recommend that you remove any security update. To remove this update, use thePrograms and Features item in Control Panel.
Update restart information
This update does not require a system restart after you apply it unless files that are being updated are locked or are being used.
Update replacement information
This update replaces previously released updates 4576629.
File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.
Windows Server 2012 file information
**Note:**The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
File information
File hash information
| File name | SHA1 hash | SHA256 hash |
|---|---|---|
| Windows8-RT-KB4578961-x64.msu | B6EFEFB53638A819F11ED6A3E63607ED5C68E19C | 23ED12D31EFEE7738B64911DE666E35CFB85EE4E68D16CBFF180796A337AA4DA |
For all supported x64-based versions
| File name | File version | File size | Date | Time | Platform | SP requirement | Service branch |
|---|---|---|---|---|---|---|---|
| Mscorlib.dll | 4.7.3701.0 | 5,420,408 | 02-Sep-2020 | 21:23 | x64 | None | Not applicable |
| Normidna.nlp | Not applicable | 59,342 | 25-Jun-2019 | 22:55 | Not applicable | None | Not applicable |
| Normnfc.nlp | Not applicable | 47,076 | 25-Jun-2019 | 22:55 | Not applicable | None | Not applicable |
| Normnfd.nlp | Not applicable | 40,566 | 25-Jun-2019 | 22:55 | Not applicable | None | Not applicable |
| Normnfkc.nlp | Not applicable | 67,808 | 25-Jun-2019 | 22:55 | Not applicable | None | Not applicable |
| Normnfkd.nlp | Not applicable | 61,718 | 25-Jun-2019 | 22:55 | Not applicable | None | Not applicable |
| Aspnet_perf.dll | 4.7.3701.0 | 39,288 | 02-Sep-2020 | 21:23 | x64 | SPN | AMD64_NETFX4-ASP |
| Aspnet_state_perf.h | Not applicable | 318 | 02-Sep-2020 | 19:34 | Not applicable | SPN | AMD64_NETFX4-ASP |
| Aspnet_state_perf.ini | Not applicable | 42,996 | 02-Sep-2020 | 21:24 | Not applicable | SPN | AMD64_NETFX4-ASP |
| Aspnet_wp.exe | 4.7.3701.0 | 43,904 | 02-Sep-2020 | 21:23 | x64 | SPN | AMD64_NETFX4-ASP |
| Clrjit.dll | 4.7.3701.0 | 1,214,328 | 02-Sep-2020 | 21:23 | x64 | None | Not applicable |
| Clr.dll | 4.7.3701.0 | 10,368,888 | 02-Sep-2020 | 21:23 | x64 | None | Not applicable |
| Compatjit.dll | 4.7.3701.0 | 1,252,728 | 02-Sep-2020 | 21:23 | x64 | None | Not applicable |
| Dfdll.dll | 4.6.1099.0 | 181,400 | 27-Mar-2017 | 03:29 | x64 | None | Not applicable |
| Globalmonospace.compositefont | Not applicable | 26,040 | 26-Mar-2020 | 22:43 | Not applicable | SPA | AMD64_NETFX4-GLOBALMONOSP |
| Globalsansserif.compositefont | Not applicable | 26,489 | 26-Mar-2020 | 22:43 | Not applicable | None | Not applicable |
| Globalserif.compositefont | Not applicable | 29,779 | 26-Mar-2020 | 22:43 | Not applicable | None | Not applicable |
| Globaluserinterface.compositefont | Not applicable | 186,009 | 21-Jul-2020 | 23:13 | Not applicable | None | Not applicable |
| Mscordacwks.dll | 4.7.3701.0 | 1,833,848 | 02-Sep-2020 | 21:23 | x64 | None | Not applicable |
| Mscordbi.dll | 4.7.3701.0 | 1,615,224 | 02-Sep-2020 | 21:23 | x64 | None | Not applicable |
| Mscoreei.dll | 4.7.3468.0 | 631,272 | 06-Aug-2019 | 06:44 | x64 | None | Not applicable |
| Msvcp120_clr0400.dll | 12.0.52519.0 | 690,008 | 21-Jul-2020 | 02:46 | x64 | None | Not applicable |
| Msvcr120_clr0400.dll | 12.0.52519.0 | 993,632 | 21-Jul-2020 | 02:46 | x64 | None | Not applicable |
| Penimc.dll | 14.7.3680.0 | 12,168 | 30-Jul-2020 | 23:18 | x64 | None | Not applicable |
| Penimc2_v0400.dll | 4.7.3680.0 | 97,672 | 30-Jul-2020 | 23:18 | x64 | None | Not applicable |
| Penimc_v0400.dll | 4.7.3680.0 | 18,816 | 30-Jul-2020 | 23:18 | x64 | None | Not applicable |
| Peverify.dll | 4.7.3701.0 | 253,816 | 02-Sep-2020 | 21:23 | x64 | None | Not applicable |
| Presentationframework-systemdata.dll | 4.7.3680.0 | 17,272 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Presentationframework.dll | 4.7.3680.0 | 6,243,200 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Presentationhost_v0400.dll.mui | 4.7.3680.0 | 77,696 | 30-Jul-2020 | 23:18 | Not applicable | None | Not applicable |
| Presentationhost_v0400.dll | 4.7.3680.0 | 270,728 | 30-Jul-2020 | 23:18 | x64 | None | Not applicable |
| Presentationnative_v0400.dll | 4.7.3680.0 | 1,102,728 | 30-Jul-2020 | 23:18 | x64 | None | Not applicable |
| Reachframework.dll | 4.7.3570.0 | 677,656 | 03-Dec-2019 | 23:18 | x86 | None | Not applicable |
| Servicemodel.mof | Not applicable | 88,383 | 29-Feb-2020 | 03:01 | Not applicable | None | Not applicable |
| Servicemodel.mof.uninstall | Not applicable | 896 | 29-Feb-2020 | 03:01 | Not applicable | None | Not applicable |
| Servicemonikersupport.dll | 4.7.3620.0 | 32,240 | 26-Mar-2020 | 23:02 | x64 | None | Not applicable |
| Smdiagnostics.dll | 4.7.3620.0 | 74,840 | 26-Mar-2020 | 23:04 | x86 | None | Not applicable |
| _smsvchostperfcounters.h | Not applicable | 702 | 06-Dec-2019 | 17:31 | Not applicable | None | Not applicable |
| _smsvchostperfcounters.ini | Not applicable | 133,894 | 06-Dec-2019 | 18:41 | Not applicable | None | Not applicable |
| _smsvchostperfcounters_d.ini | Not applicable | 39 | 08-Nov-2019 | 03:11 | Not applicable | None | Not applicable |
| Smsvchost.exe | 4.7.3580.0 | 139,056 | 06-Dec-2019 | 18:40 | x86 | None | Not applicable |
| Smsvchost.exe.config | Not applicable | 2,262 | 06-Dec-2019 | 16:35 | Not applicable | None | Not applicable |
| Sos.dll | 4.7.3701.0 | 865,144 | 02-Sep-2020 | 21:23 | x64 | None | Not applicable |
| System.activities.dll | 4.7.3620.0 | 1,534,008 | 26-Mar-2020 | 23:04 | x86 | None | Not applicable |
| System.componentmodel.dataannotations.dll | 4.6.1099.0 | 125,760 | 27-Mar-2017 | 03:33 | x86 | None | Not applicable |
| System.configuration.dll | 4.7.3630.0 | 420,512 | 05-Jun-2020 | 04:50 | x86 | None | Not applicable |
| System.core.dll | 4.7.3680.0 | 1,544,984 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| System.data.entity.dll | 4.7.2102.0 | 4,033,744 | 06-Jun-2017 | 23:17 | x86 | None | Not applicable |
| System.data.sqlxml.dll | 4.7.2612.0 | 734,400 | 22-Nov-2017 | 20:59 | x86 | None | Not applicable |
| System.deployment.dll | 4.6.1099.0 | 846,016 | 27-Mar-2017 | 03:33 | x86 | None | Not applicable |
| System.directoryservices.accountmanagement.dll | 4.7.2623.0 | 296,216 | 30-Nov-2017 | 04:16 | x86 | None | Not applicable |
| System.directoryservices.protocols.dll | 4.6.1099.0 | 200,488 | 27-Mar-2017 | 03:33 | x86 | None | Not applicable |
| System.drawing.dll | 4.6.1099.0 | 594,616 | 27-Mar-2017 | 03:33 | x86 | None | Not applicable |
| System.identitymodel.services.dll | 4.7.3620.0 | 199,160 | 26-Mar-2020 | 23:04 | x86 | None | Not applicable |
| System.identitymodel.dll | 4.7.3620.0 | 1,095,736 | 26-Mar-2020 | 23:04 | x86 | None | Not applicable |
| System.management.dll | 4.7.2102.0 | 415,432 | 06-Jun-2017 | 23:17 | x86 | None | Not applicable |
| System.net.http.dll | 4.7.2634.0 | 203,352 | 02-Feb-2018 | 21:11 | x86 | None | Not applicable |
| System.runtime.caching.dll | 4.6.1649.1 | 108,920 | 21-Apr-2017 | 05:35 | x86 | None | Not applicable |
| System.runtime.remoting.dll | 4.7.2114.0 | 347,368 | 30-Aug-2017 | 06:04 | x86 | None | Not applicable |
| System.runtime.serialization.dll | 4.7.3620.0 | 1,057,336 | 26-Mar-2020 | 23:04 | x86 | None | Not applicable |
| System.security.dll | 4.7.3701.0 | 318,712 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| System.servicemodel.channels.dll | 4.7.3620.0 | 158,704 | 26-Mar-2020 | 23:04 | x86 | None | Not applicable |
| System.servicemodel.discovery.dll | 4.7.3620.0 | 309,232 | 26-Mar-2020 | 23:04 | x86 | None | Not applicable |
| System.servicemodel.internals.dll | 4.7.3620.0 | 261,688 | 26-Mar-2020 | 23:04 | x86 | None | Not applicable |
| System.servicemodel.routing.dll | 4.6.1099.0 | 130,288 | 27-Mar-2017 | 03:33 | x86 | None | Not applicable |
| System.servicemodel.washosting.dll | 4.7.3620.0 | 40,944 | 26-Mar-2020 | 23:04 | x86 | None | Not applicable |
| System.servicemodel.dll | 4.7.3620.0 | 6,324,792 | 26-Mar-2020 | 23:04 | x86 | None | Not applicable |
| System.speech.dll | 4.7.3650.0 | 675,720 | 30-Jun-2020 | 01:11 | x86 | SPE | AMD64_NETFX4-SYSTEM.SP |
| System.web.applicationservices.dll | 4.7.3701.0 | 63,744 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| System.web.extensions.dll | 4.7.3701.0 | 1,842,936 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| System.windows.controls.ribbon.dll | 4.7.3680.0 | 739,208 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| System.windows.forms.dll | 4.7.3701.0 | 5,234,432 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| System.workflow.activities.dll | 4.7.3570.0 | 1,052,136 | 03-Dec-2019 | 23:18 | x86 | None | Not applicable |
| System.workflow.componentmodel.dll | 4.7.3570.0 | 1,553,896 | 03-Dec-2019 | 23:18 | x86 | None | Not applicable |
| System.workflow.runtime.dll | 4.7.3570.0 | 499,480 | 03-Dec-2019 | 23:18 | x86 | None | Not applicable |
| System.xaml.dll | 4.7.3680.0 | 635,168 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| System.xml.dll | 4.7.2612.0 | 2,670,224 | 22-Nov-2017 | 20:59 | x86 | None | Not applicable |
| System.dll | 4.7.3650.0 | 3,556,616 | 30-Jun-2020 | 01:11 | x86 | None | Not applicable |
| Uiautomationclientsideproviders.dll | 4.7.3680.0 | 354,184 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Uiautomationclient.dll | 4.7.3680.0 | 170,888 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Uiautomationprovider.dll | 4.7.3680.0 | 41,864 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Uiautomationtypes.dll | 4.7.3680.0 | 213,896 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Webengine4.dll | 4.7.3701.0 | 660,344 | 02-Sep-2020 | 21:23 | x64 | None | Not applicable |
| Webengine.dll | 4.7.3701.0 | 19,320 | 02-Sep-2020 | 21:23 | x64 | None | Not applicable |
| Windowsbase.dll | 4.7.3680.0 | 1,289,096 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Wminet_utils.dll | 4.7.2102.0 | 188,088 | 06-Jun-2017 | 23:13 | x64 | None | Not applicable |
| Workflowservicehostperformancecounters.dll | 4.7.3570.0 | 101,656 | 03-Dec-2019 | 23:18 | x64 | None | Not applicable |
| Wpfgfx_v0400.dll | 4.7.3680.0 | 1,758,600 | 30-Jul-2020 | 23:18 | x64 | None | Not applicable |
| Presentationcore.dll | 4.7.3680.0 | 3,609,480 | 30-Jul-2020 | 23:18 | x64 | None | Not applicable |
| System.data.dll | 4.7.3701.0 | 3,526,008 | 02-Sep-2020 | 21:23 | x64 | None | Not applicable |
| System.printing.dll | 4.7.3570.0 | 374,552 | 03-Dec-2019 | 23:18 | x64 | None | Not applicable |
| System.transactions.dll | 4.7.3221.0 | 311,048 | 30-Aug-2018 | 22:10 | x64 | None | Not applicable |
| System.web.dll | 4.7.3701.0 | 5,393,272 | 02-Sep-2020 | 21:23 | x64 | None | Not applicable |
| Presentationframework-systemdata.dll | 4.7.3680.0 | 17,272 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Presentationframework.dll | 4.7.3680.0 | 6,243,200 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Reachframework.dll | 4.7.3570.0 | 677,656 | 03-Dec-2019 | 23:18 | x86 | None | Not applicable |
| Smdiagnostics.dll | 4.7.3620.0 | 74,840 | 26-Mar-2020 | 23:05 | x86 | None | Not applicable |
| Smsvchost.exe | 4.7.3580.0 | 139,056 | 06-Dec-2019 | 18:40 | x86 | None | Not applicable |
| System.activities.dll | 4.7.3620.0 | 1,534,008 | 26-Mar-2020 | 23:05 | x86 | None | Not applicable |
| System.componentmodel.dataannotations.dll | 4.6.1099.0 | 125,760 | 27-Mar-2017 | 03:33 | x86 | None | Not applicable |
| System.configuration.dll | 4.7.3630.0 | 420,512 | 05-Jun-2020 | 04:50 | x86 | None | Not applicable |
| System.core.dll | 4.7.3680.0 | 1,544,984 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| System.data.entity.dll | 4.7.2102.0 | 4,033,744 | 06-Jun-2017 | 23:17 | x86 | None | Not applicable |
| System.data.sqlxml.dll | 4.7.2612.0 | 734,400 | 22-Nov-2017 | 20:59 | x86 | None | Not applicable |
| System.deployment.dll | 4.6.1099.0 | 846,016 | 27-Mar-2017 | 03:33 | x86 | None | Not applicable |
| System.directoryservices.accountmanagement.dll | 4.7.2623.0 | 296,216 | 30-Nov-2017 | 04:16 | x86 | None | Not applicable |
| System.directoryservices.protocols.dll | 4.6.1099.0 | 200,488 | 27-Mar-2017 | 03:33 | x86 | None | Not applicable |
| System.drawing.dll | 4.6.1099.0 | 594,616 | 27-Mar-2017 | 03:33 | x86 | None | Not applicable |
| System.identitymodel.services.dll | 4.7.3620.0 | 199,160 | 26-Mar-2020 | 23:05 | x86 | None | Not applicable |
| System.identitymodel.dll | 4.7.3620.0 | 1,095,736 | 26-Mar-2020 | 23:05 | x86 | None | Not applicable |
| System.management.dll | 4.7.2102.0 | 415,432 | 06-Jun-2017 | 23:17 | x86 | None | Not applicable |
| System.net.http.dll | 4.7.2634.0 | 203,352 | 02-Feb-2018 | 21:11 | x86 | None | Not applicable |
| System.runtime.caching.dll | 4.6.1649.1 | 108,920 | 21-Apr-2017 | 05:35 | x86 | None | Not applicable |
| System.runtime.remoting.dll | 4.7.2114.0 | 347,368 | 30-Aug-2017 | 06:04 | x86 | None | Not applicable |
| System.runtime.serialization.dll | 4.7.3620.0 | 1,057,336 | 26-Mar-2020 | 23:05 | x86 | None | Not applicable |
| System.security.dll | 4.7.3701.0 | 318,712 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| System.servicemodel.channels.dll | 4.7.3620.0 | 158,704 | 26-Mar-2020 | 23:05 | x86 | None | Not applicable |
| System.servicemodel.discovery.dll | 4.7.3620.0 | 309,232 | 26-Mar-2020 | 23:05 | x86 | None | Not applicable |
| System.servicemodel.internals.dll | 4.7.3620.0 | 261,688 | 26-Mar-2020 | 23:05 | x86 | None | Not applicable |
| System.servicemodel.routing.dll | 4.6.1099.0 | 130,288 | 27-Mar-2017 | 03:33 | x86 | None | Not applicable |
| System.servicemodel.washosting.dll | 4.7.3620.0 | 40,944 | 26-Mar-2020 | 23:05 | x86 | None | Not applicable |
| System.servicemodel.dll | 4.7.3620.0 | 6,324,792 | 26-Mar-2020 | 23:05 | x86 | None | Not applicable |
| System.speech.dll | 4.7.3650.0 | 675,720 | 30-Jun-2020 | 01:11 | x86 | SPE | MSIL_SYSTEM.SP |
| System.web.applicationservices.dll | 4.7.3701.0 | 63,744 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| System.web.extensions.dll | 4.7.3701.0 | 1,842,936 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| System.windows.controls.ribbon.dll | 4.7.3680.0 | 739,208 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| System.windows.forms.dll | 4.7.3701.0 | 5,234,432 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| System.workflow.activities.dll | 4.7.3570.0 | 1,052,136 | 03-Dec-2019 | 23:18 | x86 | None | Not applicable |
| System.workflow.componentmodel.dll | 4.7.3570.0 | 1,553,896 | 03-Dec-2019 | 23:18 | x86 | None | Not applicable |
| System.workflow.runtime.dll | 4.7.3570.0 | 499,480 | 03-Dec-2019 | 23:18 | x86 | None | Not applicable |
| System.xaml.dll | 4.7.3680.0 | 635,168 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| System.xml.dll | 4.7.2612.0 | 2,670,224 | 22-Nov-2017 | 20:59 | x86 | None | Not applicable |
| System.dll | 4.7.3650.0 | 3,556,616 | 30-Jun-2020 | 01:11 | x86 | None | Not applicable |
| Uiautomationclientsideproviders.dll | 4.7.3680.0 | 354,184 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Uiautomationclient.dll | 4.7.3680.0 | 170,888 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Uiautomationprovider.dll | 4.7.3680.0 | 41,864 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Uiautomationtypes.dll | 4.7.3680.0 | 213,896 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Windowsbase.dll | 4.7.3680.0 | 1,289,096 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Mscorlib.dll | 4.7.3701.0 | 5,638,520 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| Normidna.nlp | Not applicable | 59,342 | 25-Jun-2019 | 22:55 | Not applicable | None | Not applicable |
| Normnfc.nlp | Not applicable | 47,076 | 25-Jun-2019 | 22:55 | Not applicable | None | Not applicable |
| Normnfd.nlp | Not applicable | 40,566 | 25-Jun-2019 | 22:55 | Not applicable | None | Not applicable |
| Normnfkc.nlp | Not applicable | 67,808 | 25-Jun-2019 | 22:55 | Not applicable | None | Not applicable |
| Normnfkd.nlp | Not applicable | 61,718 | 25-Jun-2019 | 22:55 | Not applicable | None | Not applicable |
| Aspnet_perf.dll | 4.7.3701.0 | 35,704 | 02-Sep-2020 | 21:24 | x86 | SPN | X86_NETFX4-ASP |
| Aspnet_state_perf.h | Not applicable | 318 | 02-Sep-2020 | 19:26 | Not applicable | SPN | X86_NETFX4-ASP |
| Aspnet_state_perf.ini | Not applicable | 42,996 | 02-Sep-2020 | 21:25 | Not applicable | SPN | X86_NETFX4-ASP |
| Aspnet_wp.exe | 4.7.3701.0 | 39,296 | 02-Sep-2020 | 21:24 | x86 | SPN | X86_NETFX4-ASP |
| Clrjit.dll | 4.7.3701.0 | 515,960 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| Clr.dll | 4.7.3701.0 | 7,247,736 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| Dfdll.dll | 4.6.1099.0 | 154,768 | 27-Mar-2017 | 03:33 | x86 | None | Not applicable |
| Globalmonospace.compositefont | Not applicable | 26,040 | 26-Mar-2020 | 22:43 | Not applicable | SPA | X86_NETFX4-GLOBALMONOSP |
| Globalsansserif.compositefont | Not applicable | 26,489 | 26-Mar-2020 | 22:43 | Not applicable | None | Not applicable |
| Globalserif.compositefont | Not applicable | 29,779 | 26-Mar-2020 | 22:43 | Not applicable | None | Not applicable |
| Globaluserinterface.compositefont | Not applicable | 186,009 | 21-Jul-2020 | 23:13 | Not applicable | None | Not applicable |
| Mscordacwks.dll | 4.7.3701.0 | 1,336,184 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| Mscordbi.dll | 4.7.3701.0 | 1,162,104 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| Mscoreei.dll | 4.7.3468.0 | 512,488 | 06-Aug-2019 | 06:46 | x86 | None | Not applicable |
| Msvcp120_clr0400.dll | 12.0.52519.0 | 485,576 | 21-Jul-2020 | 02:46 | x86 | None | Not applicable |
| Msvcr120_clr0400.dll | 12.0.52519.0 | 987,840 | 21-Jul-2020 | 02:46 | x86 | None | Not applicable |
| Penimc.dll | 14.7.3680.0 | 12,168 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Penimc2_v0400.dll | 4.7.3680.0 | 79,240 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Penimc_v0400.dll | 4.7.3680.0 | 17,800 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Peverify.dll | 4.7.3701.0 | 181,624 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| Presentationhost_v0400.dll.mui | 4.7.3680.0 | 77,688 | 30-Jul-2020 | 23:22 | Not applicable | None | Not applicable |
| Presentationhost_v0400.dll | 4.7.3680.0 | 207,232 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Presentationnative_v0400.dll | 4.7.3680.0 | 820,104 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Servicemonikersupport.dll | 4.7.3620.0 | 30,192 | 26-Mar-2020 | 23:05 | x86 | None | Not applicable |
| Smsvchost.exe.config | Not applicable | 2,262 | 12-Nov-2019 | 09:55 | Not applicable | None | Not applicable |
| Sos.dll | 4.7.3701.0 | 736,632 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| System.componentmodel.dataannotations.dll | 4.6.1099.0 | 125,760 | 27-Mar-2017 | 03:33 | x86 | None | Not applicable |
| System.core.dll | 4.7.3680.0 | 1,544,984 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| System.data.entity.dll | 4.7.2102.0 | 4,033,744 | 06-Jun-2017 | 23:17 | x86 | None | Not applicable |
| System.web.extensions.dll | 4.7.3701.0 | 1,842,936 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| Webengine4.dll | 4.7.3701.0 | 543,096 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| Webengine.dll | 4.7.3701.0 | 17,784 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| Wminet_utils.dll | 4.7.2102.0 | 136,368 | 06-Jun-2017 | 23:17 | x86 | None | Not applicable |
| Workflowservicehostperformancecounters.dll | 4.7.3570.0 | 89,880 | 03-Dec-2019 | 23:18 | x86 | None | Not applicable |
| Wpfgfx_v0400.dll | 4.7.3680.0 | 1,338,760 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| Presentationcore.dll | 4.7.3680.0 | 3,632,008 | 30-Jul-2020 | 23:22 | x86 | None | Not applicable |
| System.data.dll | 4.7.3701.0 | 3,464,056 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
| System.printing.dll | 4.7.3570.0 | 374,032 | 03-Dec-2019 | 23:18 | x86 | None | Not applicable |
| System.transactions.dll | 4.7.3221.0 | 309,328 | 30-Aug-2018 | 22:13 | x86 | None | Not applicable |
| System.web.dll | 4.7.3701.0 | 5,409,672 | 02-Sep-2020 | 21:24 | x86 | None | Not applicable |
Information about protection and security
- Protect yourself online: Windows Security support
- Learn how we guard against cyber threats: Microsoft Security
Related
mskb
mskb
Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1 and Windows Server 2012 R2 (KB4580469)
2020-10-13 07:00:00
redhatcve
redhatcve
CVE-2020-16937
2020-12-10 13:45:10
prion
prion
Information disclosure
2020-10-16 23:15:00
nessus
nessus
Security Updates for Microsoft .NET Framework (October 2020)
2020-10-19 00:00:00
KB4580385: Windows Server 2008 October 2020 Security Update
2020-10-13 00:00:00
KB4580353: Windows Server 2012 October 2020 Security Update
2020-10-13 00:00:00
mscve
mscve
.NET Framework Information Disclosure Vulnerability
2020-10-13 07:00:00
cve
cve
CVE-2020-16937
2020-10-16 23:15:00
openvas
openvas
Microsoft .NET Framework Multiple Vulnerabilities (KB4578972)
2020-10-14 00:00:00
Microsoft .NET Framework Multiple Vulnerabilities (KB4579977)
2020-10-14 00:00:00
Microsoft .NET Framework Multiple Vulnerabilities (KB4578974)
2020-10-14 00:00:00
kaspersky
kaspersky
KLA11971 Multiple vulnerabilities in Microsoft Developer Tools
2020-10-13 00:00:00
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
6.3 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
8.9%
Related for KB4578961