Skip to the content
The Update Bureau

.NET Framework 4.7.2

.NET Framework 4.7.2

Every published release for .NET Framework 4.7.2, newest first: what each update changes, whether to install it and any confirmed known issues.

Latest
KB5127666 Oct 13, 2026
File version
4.7.4150.0
Released
Apr 30, 2018
Known issues
none open

Latest update

  • KB5127666 Released Oct 13, 2026
    File version 4.7.4150.0

Update history

  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Security update

    KB5127666

    Publicly disclosed .NET security bypass addressed

    The update addresses 21 vulnerabilities, including one critical flaw. CVE-2026-108398 could bypass a .NET Framework security protection and was publicly disclosed.

    Key changes 21 CVEs · 19 changes

    • Fix .NET Framework: The update addresses a flaw that could make a service unavailable.
    • Fix .NET Framework: The update addresses a flaw that could let someone gain higher permissions.
    • Fix .NET Framework: The update addresses a flaw that could make a service unavailable.

    Read update Source: Microsoft

    Builds
    4.7.4150.0 · 2.0.50727.9073
    Security
    21 fixed · 1 critical
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Security update

    KB5126043

    Privilege and code-execution flaws addressed

    The update addresses two security flaws: one could let an attacker gain higher privileges, and another could let them run code.

    Check the newer update, KB5127666

    Key changes 2 CVEs · 2 changes

    • Fix .NET Framework: The update addresses a flaw that could let an attacker gain higher privileges.
    • Fix .NET Framework: The update addresses a flaw that could let an attacker run code.
    • CVSS 8.8 CVE-2026-69522: .NET and Visual Studio Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Builds
    4.7.4145.0 · 2.0.50727.9070
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Security update

    KB5120698

    Six .NET vulnerabilities addressed; WPF issues resolved later

    The update addresses six .NET Framework vulnerabilities. Two WPF printing issues were later resolved in the September and October 2026 cumulative updates.

    Check the newer update, KB5126043

    Key changes 6 CVEs · 6 changes

    • Improved .NET Framework: The update addresses a .NET Framework elevation-of-privilege vulnerability.
    • Improved .NET Framework: The update addresses a .NET Framework elevation-of-privilege vulnerability.
    • Improved .NET Framework: The update addresses a .NET Framework remote-code-execution vulnerability.

    Read update Source: Microsoft

    Builds
    4.7.4144.0 · 2.0.50727.9070
    Security
    6 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Security update

    KB5100989

    Secure web request hangs addressed; 17 security flaws fixed

    Fixes 17 Important .NET Framework security flaws and a problem that could leave some secure web requests stuck. A restart may be needed if affected files are in use.

    Check the newer update, KB5120698

    Key changes 17 CVEs · 18 changes

    • Fix .NET Framework: A flaw that could make a .NET app stop responding is fixed.
    • Fix .NET Framework: A flaw that could bypass a security feature is fixed.
    • Fix .NET Framework: A flaw that could make a .NET app stop responding is fixed.

    Read update Source: Microsoft

    Builds
    4.7.4143.0 · 2.0.50727.9069
    Security
    17 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Security update

    KB5087061

    Two flaws that could raise access are addressed

    The update addresses two flaws that could let attackers gain higher access. It adds no new reliability improvements.

    Check the newer update, KB5100989

    Key changes 2 CVEs · 2 changes

    • Fix .NET Framework: A flaw that could let an attacker gain higher access is addressed.
    • Fix .NET Framework: A flaw that could let an attacker gain higher access is addressed.
    • CVSS 7.3 CVE-2026-32177: .NET Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Builds
    4.7.4142.0 · 2.0.50727.9068
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Security update

    KB5082413

    Critical service-disruption flaw addressed; ClickOnce checks expanded

    Six .NET Framework security flaws are addressed, including one critical flaw that could stop a service from responding. ClickOnce also gains support for SHA384 and SHA512 checks.

    Check the newer update, KB5087061

    Key changes 6 CVEs · 7 changes

    • Improved .NET Runtime: ClickOnce apps gain support for SHA384 and SHA512 checks.
    • Fix .NET Framework: A flaw that could let code run from a remote computer is addressed.
    • Fix .NET Framework: A flaw that could make an app or service stop responding is addressed.

    Read update Source: Microsoft

    Builds
    4.7.4141.0 · 2.0.50727.9068
    Security
    6 fixed · 1 critical
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Security update

    KB5066143

    Information disclosure flaw in framework components addressed

    The update addresses CVE-2025-55248, an information disclosure vulnerability in .NET Framework. A restart is required if affected files are in use.

    Check the newer update, KB5082413

    Key changes 1 CVE · 1 change

    • Fix .NET Framework: An information disclosure vulnerability is addressed.
    • Security CVE-2025-55248: .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability

    Read update Source: Microsoft

    Builds
    4.7.4137.0 · 2.0.50727.9067
    Security
    1 vulnerability fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Update

    KB5065744

    ASP.NET event logging and GB18030 certificate updated

    The update addresses an ASP.NET problem that prevented some error events from being logged and updates a certificate for Chinese language changes. It includes no new security improvements.

    Check the newer update, KB5066143

    Key changes 2 changes

    • Improved WPF: The GB18030 certificate is updated for Chinese language changes.
    • Fix ASP.NET: The update addresses a problem that caused some ASP.NET error events to fail to appear in the Windows Event log.

    Read update Source: Microsoft

    Builds
    4.7.4136.0 · 2.0.50727.9066
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Update

    KB5062070

    .NET library timing issues and error dialogs addressed

    Addresses a timing issue in .NET library functions and error-reporting dialogs that could appear while .NET libraries load.

    Check the newer update, KB5065744

    Key changes 2 changes

    • Fix .NET Libraries: Some .NET applications that inspect object properties work more reliably when several operations happen at once.
    • Fix .NET Runtime: Applications might no longer show error-reporting dialogs when .NET loads a library while Windows checks whether its code is trusted.

    Read update Source: Microsoft

    Builds
    4.7.4135.0 · 2.0.50727.9066
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Update

    KB5054695

    Large-page WPF printing gets an OutOfMemory fix

    The update addresses an OutOfMemory exception that could interrupt printing large numbers of pages. It adds no new security improvements.

    Check the newer update, KB5062070

    Key changes 1 change

    • Fix WPF: Addresses an issue that could cause an OutOfMemory exception when printing a large number of pages.

    Read update Source: Microsoft

    Builds
    4.7.4130.0 · 2.0.50727.9066
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Security update

    KB5049608

    Closes a .NET remote-code-execution flaw and CLR loop issue

    The update addresses a remote-code-execution vulnerability in .NET Framework and a rare CLR infinite-loop issue.

    Check the newer update, KB5066143

    Key changes 1 CVE · 2 changes

    • Fix .NET Framework: A remote-code-execution vulnerability in .NET Framework is addressed.
    • Fix .NET Runtime: Addresses a rare case where a thread entering the CLR for the first time could get caught in an infinite loop.
    • Security CVE-2025-21176: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Builds
    4.7.4126.0 · 2.0.50727.9066
    Security
    1 vulnerability fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Update

    KB5046268

    Rare CLR loop and interface-call issues addressed

    Addresses several .NET Framework reliability issues, including a rare infinite loop when a thread first enters the CLR. It adds no new security improvements and includes previously released ones.

    Check the newer update, KB5049608

    Key changes 5 changes

    • Fix CLR: A rare issue that could cause an infinite loop when a thread first enters the Common Language Runtime is addressed.
    • Fix CLR: An issue with interface-call devirtualization is addressed in cases where JIT optimizations are enabled.
    • Fix CLR: An issue that could bypass a security feature when SecUtility.RandomByte is used is addressed.

    Read update Source: Microsoft

    Builds
    4.7.4121.0 · 2.0.50727.9066
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Security update

    KB5044016

    Framework denial-of-service flaws addressed

    The update addresses two .NET Framework denial-of-service vulnerabilities, CVE-2024-43483 and CVE-2024-43484. A restart is required if affected files are in use.

    Check the newer update, KB5049608

    Key changes 2 CVEs · 2 changes

    • Improved .NET Framework: The update addresses a .NET Framework denial-of-service vulnerability identified as CVE-2024-43483.
    • Improved .NET Framework: The update addresses a .NET Framework denial-of-service vulnerability identified as CVE-2024-43484.
    • Security CVE-2024-43483: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

    Read update Source: Microsoft

    Builds
    4.7.4115.0 · 2.0.50727.9066
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Update

    KB5041913

    Updates zlib and corrects .NET data handling and WebForms metadata

    The update refreshes a .NET library file and addresses two .NET issues, including unwanted metadata on some generated web pages. It contains no new security improvements.

    Check the newer update, KB5044016

    Key changes 3 changes

    • Fix .NET Libraries: A file used by .NET libraries is updated to its latest version.
    • Fix .NET Fundamentals: A .NET issue involving a bypass in handling serialized data is addressed.
    • Fix .NET Fundamentals: An affected web-page feature no longer adds certain advisory and content-rating information to pages.

    Read update Source: Microsoft

    Builds
    4.7.4108.0 · 2.0.50727.9066
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Security update

    KB5039879

    Temp-path behavior changes to close a privilege flaw

    The update addresses CVE-2024-38081, an elevation-of-privilege vulnerability. It also changes how .NET resolves temporary paths, which may require affected applications to adapt.

    Check the newer update, KB5044016

    Key changes 1 CVE · 2 changes

    • Fix .NET Framework: Addresses an elevation-of-privilege vulnerability.
    • Fix Winforms: Addresses a memory leak associated with AccessibleObjects held in memory.
    • Security CVE-2024-38081: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Builds
    4.7.4101.0 · 2.0.50727.9064
    Security
    1 vulnerability fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Update

    KB5037932

    Concurrent .NET crashes and 32-bit response delays addressed

    The update addresses possible .NET runtime crashes during concurrent type queries and a response-time regression on 32-bit platforms. You must restart the computer after applying it if any affected files are in use.

    Check the newer update, KB5039879

    Key changes 2 changes

    • Fix CLR: Addresses crashes that can occur when several threads query the same managed type at the same time.
    • Fix .NET Libraries: Addresses a significant response-time slowdown on 32-bit platforms.

    Read update Source: Microsoft

    Builds
    4.7.4095.0 · 2.0.50727.9063
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Security update

    KB5036604

    ASP.NET slowdown fixed; security flaws addressed

    The update addresses a security flaw that could let an attacker run code on an affected system, updates an outdated library, and addresses an ASP.NET performance slowdown.

    Check the newer update, KB5039879

    Key changes 1 CVE · 4 changes

    • Fix .NET Framework: Addresses a security flaw that could let an attacker run code on an affected system.
    • Fix .NET Framework: Updates an outdated library version as part of a security improvement.
    • Fix .NET Framework: Addresses a security issue in a data-fetching process.

    Read update Source: Microsoft

    Builds
    4.7.4092.0 · 2.0.50727.9063
    Security
    1 vulnerability fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Update

    KB5034619

    Illegal-path errors in some ASP.NET MVC requests addressed

    The update addresses an illegal-path error in some ASP.NET MVC requests. It adds no new security improvements but includes previously released ones.

    Check the newer update, KB5036604

    Key changes 1 change

    • Fix ASP.NET: The update addresses an illegal-path error in some ASP.NET MVC requests.

    Read update Source: Microsoft

    Builds
    4.7.4087.0 · 2.0.50727.9063
    Restart
    Required
  • .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Security update

    KB5033904

    Closes .NET flaws, including remote code execution

    The update addresses three listed CVEs and a remote code execution vulnerability involving .NET remoting. It applies to Windows 10, version 1809 and Windows Server 2019.

    Check the newer update, KB5036604

    Key changes 3 CVEs · 4 changes

    • Fix .NET Framework: Addresses a flaw that could let someone get around .NET Framework security protections.
    • Fix .NET Framework: Addresses a flaw that could let someone gain permissions they should not have.
    • Fix .NET Framework: Addresses a flaw that could make a service unavailable.

    Read update Source: Microsoft

    Builds
    4.7.4081.0 · 2.0.50727.9063
    Security
    3 vulnerabilities fixed
    Restart
    Required