Skip to the content
The Update Bureau

.NET Framework 4.8

.NET Framework 4.8

Every published release for .NET Framework 4.8, newest first: what each update changes, whether to install it and any confirmed known issues.

Latest
KB5127683 Oct 13, 2026
File version
4.8.4811.0
Released
Apr 18, 2019
Known issues
none open

Update history

  • .NET Framework 4.8 .NET Framework 4.8 for Windows 10 1607 · Windows Server 2016 Update

    KB5037926

    Crashes from concurrent ITypeInfo queries on one managed type addressed

    When several threads query one managed type's ITypeInfo at once, crashes can occur; this update addresses that case. It also addresses a major response-time slowdown on 32-bit platforms.

    Check the newer update, KB5039885

    Key changes 5 changes

    • Fix CLR: Crashes can occur when several threads query the same managed type at once; this update addresses that case.
    • Fix .NET Libraries: The update addresses a major response-time slowdown on 32-bit platforms.
    • Fix .NET Libraries: The update addresses an issue with how certain security algorithms are used.
    Build
    4.8.4729.0
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 22H2 Optional preview
    Preview

    KB5037724

    Earlier security protections remain included

    This .NET Framework preview keeps earlier security protections and includes quality and reliability improvements. Windows Update installs it automatically on Windows 10 version 22H2.

    Check the newer update, KB5040370

    Key changes 2 changes

    • Improved Security: Earlier security protections remain part of this cumulative update.
    • Improved .NET Framework: The update includes quality and reliability improvements. The page links to articles with details.
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 21H2, 22H2 Security update

    KB5036608

    Patches a remote code flaw and addresses unresponsive task queues

    The update addresses a remote code-execution flaw in .NET and two other security issues. It also tackles slowdowns in ASP.NET apps and background tasks that stop responding.

    Check the newer update, KB5039884

    Key changes 1 CVE · 5 changes

    • Fix .NET Framework: A security flaw that could let an attacker run code on a device remotely is addressed.
    • Fix .NET Framework: A security issue involving an outdated component used by .NET is addressed.
    • Fix .NET Framework: A security issue in a .NET process that fetches information is addressed.
    Builds
    4.8.4718.0 · 2.0.50727.9176
    Security
    1 vulnerability fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows Server 2022 Security update

    KB5036613

    Remote-code flaw addressed; serializer slowdown improved

    The update addresses CVE-2024-21409, a .NET Framework remote code execution flaw, and reliability problems in ASP.NET and the CLR.

    Check the newer update, KB5039889

    Key changes 1 CVE · 5 changes

    • Fix .NET Framework: Addresses a remote code execution vulnerability in .NET Framework.
    • Fix .NET Framework: Addresses a security issue involving an outdated OSS zlib library.
    • Fix .NET Framework: Addresses a security issue in the AIA fetching process.
    Builds
    4.8.4718.0 · 2.0.50727.9176
    Security
    1 vulnerability fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 1809 · Windows Server 2019 Security update

    KB5036610

    Remote code execution flaw addressed; ASP.NET slowdown tackled

    Addresses a .NET Framework remote code execution vulnerability and reliability issues, including an ASP.NET performance drop after the January update.

    Check the newer update, KB5039886

    Key changes 1 CVE · 5 changes

    • Fix .NET Framework: A remote code execution vulnerability in .NET Framework is addressed.
    • Fix .NET Framework: An outdated software library version is addressed.
    • Fix .NET Framework: A problem with an information-fetching process is addressed.
    Builds
    4.8.4718.0 · 2.0.50727.9063
    Security
    1 vulnerability fixed
    Restart
    Required
  • .NET Framework 4.8 .NET Framework 4.8 for Windows 10 1607 · Windows Server 2016 Security update

    KB5036609

    Remote code execution flaw and ASP.NET slowdown addressed

    Addresses one Important .NET Framework remote code execution vulnerability (CVE-2024-21409) and reliability issues in ASP.NET and the CLR.

    Check the newer update, KB5039885

    Key changes 1 CVE · 5 changes

    • Improved .NET Framework: An issue involving an outdated OSS zlib library is addressed as a defense-in-depth improvement.
    • Improved .NET Framework: An issue in the AIA fetching process is addressed as a defense-in-depth improvement.
    • Fix .NET Framework: A remote code execution vulnerability in .NET Framework is addressed.
    Build
    4.8.4718.0
    Security
    1 vulnerability fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 22H2 Optional preview
    Preview

    KB5036036

    ASP.NET performance and thread-pool stalls addressed

    Addresses an ASP.NET performance issue after the January 2024 .NET Framework update and an issue that could make thread-pool lists unresponsive on computers with multiple CPU groups.

    Key changes 2 changes

    • Fix .NET Libraries: Addresses an ASP.NET performance issue that occurred after installing the January 2024 .NET Framework update.
    • Fix .NET Runtime: Addresses an issue that could make thread-pool lists unresponsive on computers with multiple CPU groups.
    Builds
    4.8.4712.0 · 2.0.50727.9176
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 22H2 Optional preview
    Preview

    KB5036580

    .NET 3.5, 4.8 and 4.8.1 get quality changes

    Includes cumulative quality and reliability improvements for .NET Framework 3.5, 4.8 and 4.8.1 on Windows 10, version 22H2. Windows Update downloads and installs it automatically.

    Check the newer update, KB5037724

    Key changes 1 change

    • Improved .NET Framework: Quality and reliability improvements are included for .NET Framework 3.5, 4.8 and 4.8.1.
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 21H2, 22H2 Optional preview
    Preview

    KB5034468

    ASP.NET MVC path errors and outdated zlib version addressed

    The update addresses an error in some ASP.NET MVC requests and an issue with an outdated zlib library. If you already installed it in the January 23 rollup, no action is needed.

    Check the newer update, KB5036608

    Key changes 2 changes

    • Fix ASP.NET: The update addresses an error that can occur in some ASP.NET MVC requests with illegal characters in the path.
    • Fix .NET Libraries: The update addresses an issue with an outdated version of the open-source zlib library.
    Builds
    4.8.4697.0 · 2.0.50727.9176
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows Server 2022 Update

    KB5034613

    ASP.NET MVC path errors and an outdated zlib library addressed

    The update addresses an “Illegal characters in path” error in some ASP.NET MVC requests and an outdated version of the OSS zlib library.

    Check the newer update, KB5036613

    Key changes 2 changes

    • Fix ASP.NET: The update addresses an “Illegal characters in path” error in some ASP.NET MVC requests.
    • Fix .NET Libraries: The update addresses an outdated version of the OSS zlib library.
    Builds
    4.8.4700.0 · 2.0.50727.9176
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 1809 · Windows Server 2019 Update

    KB5034624

    ASP.NET MVC path errors and outdated zlib addressed

    Addresses an illegal-path error in some ASP.NET MVC requests and an outdated OSS zlib library version. It contains no new security improvements.

    Check the newer update, KB5036610

    Key changes 2 changes

    • Fix ASP.NET: Some ASP.NET MVC requests no longer encounter an illegal-characters-in-path error.
    • Fix .NET Libraries: Addresses an issue with the outdated version of the OSS zlib library.
    Builds
    4.8.4700.0 · 2.0.50727.9063
    Restart
    Required
  • .NET Framework 4.8 .NET Framework 4.8 for Windows 10 1607 · Windows Server 2016 Update

    KB5034614

    ASP.NET path errors and outdated zlib addressed

    The update addresses an illegal-path error in some ASP.NET MVC requests and an outdated zlib library version.

    Check the newer update, KB5036609

    Key changes 2 changes

    • Fix ASP.NET: Addresses an illegal-path error in some ASP.NET MVC requests.
    • Fix .NET Libraries: Addresses an issue with an outdated version of the OSS zlib library.
    Build
    4.8.4700.0
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 22H2 Optional preview
    Preview

    KB5034582

    Includes 1 improvement

    Includes quality and reliability improvements for .NET Framework 3.5, 4.8, and 4.8.1 on Windows 10, version 22H2. Microsoft reports no known issues.

    Check the newer update, KB5036580

    Key changes 1 change

    • Improved .NET Framework: Includes quality and reliability improvements for .NET Framework 3.5, 4.8, and 4.8.1.
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 21H2, 22H2 Security update

    KB5033909

    HTTP remoting code-execution flaw addressed

    The update addresses three listed CVEs, including flaws that could bypass a security check, raise access, or disrupt a service. It also addresses a code-execution flaw in HTTP remoting.

    Check the newer update, KB5036608

    Key changes 3 CVEs · 4 changes

    • Fix .NET Framework: A flaw that could let someone bypass a security check is addressed.
    • Fix .NET Framework: A flaw that could let someone gain higher access is addressed.
    • Fix .NET Framework: A flaw that could stop a service from responding is addressed.
    Builds
    4.8.4690.0 · 2.0.50727.9176
    Security
    3 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows Server 2022 Security update

    KB5033914

    HTTP remoting code-execution flaw and three CVEs addressed

    The update addresses three listed vulnerabilities that could bypass a security check, grant excessive access, or disrupt a service, plus a separate code-execution flaw in HTTP .NET remoting.

    Check the newer update, KB5036613

    Key changes 3 CVEs · 4 changes

    • Fix .NET Framework: The update addresses a weakness that could let someone get past a security check.
    • Fix .NET Framework: The update addresses a weakness that could let someone gain more access than intended.
    • Fix .NET Framework: The update addresses a weakness that could make a service stop responding.
    Builds
    4.8.4690.0 · 2.0.50727.9176
    Security
    3 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 1809 · Windows Server 2019 Security update

    KB5033911

    Remoting flaw could let attackers run code on servers

    Addresses three .NET Framework vulnerabilities and a flaw that could let attackers run code on a server.

    Check the newer update, KB5036610

    Key changes 3 CVEs · 4 changes

    • Fix .NET Framework: Blocks a way to bypass a security feature.
    • Fix .NET Framework: Closes a flaw that could let someone gain higher access.
    • Fix .NET Framework: Closes a flaw that could stop a service from working.
    Builds
    4.8.4690.0 · 2.0.50727.9063
    Security
    3 vulnerabilities fixed
    Restart
    Required
  • .NET Framework 4.8 .NET Framework 4.8 for Windows 10 1607 · Windows Server 2016 Security update

    KB5033910

    Security flaws could bypass protections or let attackers run code

    Addresses four Important vulnerabilities in .NET Framework 4.8, including flaws that could bypass protections, disrupt service, or let an attacker run code remotely.

    Check the newer update, KB5036609

    Key changes 4 CVEs · 4 changes

    • Fix .NET Framework 4.8: A flaw could let an attacker get around a security protection.
    • Fix .NET Framework 4.8: A flaw could let an attacker gain higher permissions.
    • Fix .NET Framework 4.8: A flaw could let an attacker disrupt a service.
    Build
    4.8.4690.0
    Security
    4 vulnerabilities fixed
    Restart
    Required