Skip to the content
The Update Bureau
.NET Framework 4.8 .NET Framework 4.8 Update
Patch Tuesday

KB5037926

KB5037926: Cumulative update for .NET Framework, version 4.8, on Windows 10 1607 and Windows Server 2016, May 2024. Crashes from concurrent ITypeInfo queries on one managed type addressed

In short

When several threads query one managed type's ITypeInfo at once, crashes can occur; this update addresses that case. It also addresses a major response-time slowdown on 32-bit platforms.

Does it affect you? Applies to: Devices running Windows 10, version 1607, or Windows Server 2016, with .NET Framework 4.8 installed.

File version
4.8.4729.0
Restart
Required

What changes

Fixes 5 changes

CLR

For: Apps with concurrent queries to the same managed type

  • Crashes can occur when several threads query the same managed type at once; this update addresses that case.1
    Addresses concurrent queries to the ITypeInfo implementation of the same managed type.

.NET Libraries

2 items
  • The update addresses a major response-time slowdown on 32-bit platforms.2
  • The update addresses an issue with how certain security algorithms are used.3
    Uses MIST validated implementations of FIPS algorithms.

.NET Fundamentals

  • The update addresses problems with wildcard format changes introduced in IIS 10.4

WPF

Verified in package

For: Apps that call these methods

  • Some apps can crash when they read window text; this update addresses the problem.5
    Addresses app crashes when calling GetWindowText and GetWindowTextLength.

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5043803

    Microsoft received reports about .NET Framework May cumulative update causing customers to observe runtime exceptions in certain SQL CLR hosted scenarios.

    Certain SQL CLR hosted scenarios can cause runtime exceptions when code uses specific SHA-2 types. KB5043803 resolves this issue.6

    How to apply the workaround Workaround

    For affected assemblies, mark them as UNSAFE, or use SQL HASHBYTES instead of the .NET Framework SHA-2 APIs.6

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-05-14
Classification
Updates
Type
Cumulative update
Restart
Required
Replaces
KB5034614
Replaced by
KB5039885
VersionFile versionChannel
4.8 4.8.4729.0 General availability

Security

No vulnerabilities are listed for this update.

Downloads (Microsoft Update Catalog)

Updated components

73 files changed since the previous update for the same versions.

Top changed componentsFiles
WPF22
.NET runtime (CLR)12
WCF12

Verified in package: changed files confirm WPF.

Sources

Updated
Cited passages from Microsoft's official notes (6)
  1. 1. Addresses an issue where crashes can occur if several threads all concurrently query the ITypeInfo implementation of the same managed type support.microsoft.com
  2. 2. Addresses an issue where 32-bit platform show a significant response time regression. support.microsoft.com
  3. 3. Addresses an issue to use MIST validated implementations of FIPS algorithms. support.microsoft.com
  4. 4. Addresses an issue with wildcard format changes introduced in IIS 10. support.microsoft.com
  5. 5. Addresses an issue where apps crash when calling GetWindowText and GetWindowTextLength methods. support.microsoft.com
  6. 6. Microsoft has resolved this issue with update KB5043803. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 6 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 3/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake