The Update BureauKB5039893: Cumulative update for .NET Framework, versions 3.5 and 4.8.1, on Windows 10 21H2/22H2, July 2024. Elevation flaw fixed; temporary-path behavior changes
In short
CVE-2024-38081 is addressed. On Windows versions that expose GetTempPath2, System.IO.Path.GetTempPath can return a different path for SYSTEM processes, so affected software may need changes.
Does it affect you? Applies to: Devices running Windows 10, version 21H2 or 22H2, with .NET Framework 3.5 or 4.8.1 installed.
Review notes Additional details from the official release notes (4) Read notes
- In detail Microsoft says the update addresses a remote code execution vulnerability, CVE-2024-38081, which it also identifies as an elevation-of-privilege vulnerability.
- In short Affected software or applications are expected to make code changes to adapt to the new behavior.
-
Known issues
The update changes
System.IO.Path.GetTempPathbehavior on Windows versions that exposeGetTempPath2. Microsoft warns that opting out disables the security fix and does not recommend the temporary workaround. - What changes The issue concerns X.509 certificate use under PPL in Azure AD; the page does not specify a device-specific audience.
The official sources are linked at the end of the page.
What changes
Fixes 3 changes
.NET Framework
-
The update addresses an elevation-of-privilege vulnerability.1
Addresses CVE-2024-38081.
WinForms
-
Addresses an issue with memory leaks associated with objects held in memory.2
Addresses the size of memory leaks associated with
AccessibleObjectsheld in memory due to ref-counting.
.NET Fundamentals
- Addresses an issue using X.509 certificates under PPL in Azure AD.3
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-07-09
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5037587, KB5036618
- Replaced by
- KB5044029
| Version | File version | Channel |
|---|---|---|
| 3.5 | 2.0.50727.9177 | General availability |
| 4.8.1 | 4.8.9256.0 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
|
Not rated | — |
Downloads (Microsoft Update Catalog)
x64
Windows 10 Enterprise LTSC 2021 / Windows 10, version 22H2
75.1 MB
x86
Windows 10 Enterprise LTSC 2021 / Windows 10, version 22H2
46.6 MB
Updated components
208 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| WPF | 45 |
| ASP.NET | 24 |
| .NET runtime (CLR) | 21 |
| WCF | 18 |
| Windows Forms | 3 |
Sources
Updated
Cited passages from Microsoft's official notes (3)
-
1.
CVE-2024-38081 - .NET Framework Elevation of Privilege Vulnerability
support.microsoft.com -
2.
Addresses an issue with the size of memory leaks associated with AccessibleObjects held in memory due to ref-counting.
support.microsoft.com -
3.
Addresses an issue with x509 certificate use under PPL in Azure AD.
support.microsoft.com
Checked automatically: 7 of 8 checks passed, 3 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: not passed
A second AI read the text against the sources: correctness 3/5, clarity 4/5, completeness 3/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake