Skip to the content
The Update Bureau
.NET Framework 3.5 / 4.8.1 .NET Framework 3.5 / 4.8.1 Update
Patch Tuesday

KB5046264

KB5046264: Cumulative update for .NET Framework, versions 3.5 and 4.8.1, on Windows Server 2022, November 2024. ASP.NET editing errors and .NET runtime problems addressed

In short

Addresses an ASP.NET error in Visual Studio and several .NET runtime and user-group lookup issues on Windows Server 2022.

Does it affect you? Applies to: Devices running Windows Server 2022 with .NET Framework 3.5 or 4.8.1 installed.

File version
2.0.50727.9179 · 4.8.9287.0
Restart
Required

What changes

Fixes 7 changes

ASP.NET

Verified in package

For: Visual Studio users working with .NET Framework ASP.NET projects

  • Visual Studio no longer shows a “type initializer” error while preparing an ASP.NET project for editing.1
    Addresses the design-time compilation error involving System.Web.UI.Util in .NET Framework ASP.NET projects.

CLR

5 items
  • In rare cases, an application is less likely to get stuck when part of it first enters the .NET runtime.2
    Addresses a possible infinite loop when a thread enters the Common Language Runtime for the first time.
  • Applications using certain runtime speed optimizations are less likely to make an incorrect call through an interface.3
    Addresses incorrect interface call devirtualization when JIT optimizations are enabled.
  • An issue with bypassing a security feature when generating a random byte is addressed.4
    Addresses the security feature bypass vulnerability involving SecUtility.RandomByte.
  • An issue that could disclose information through a performance counter is addressed.5
    Addresses an information disclosure issue involving the performance counter.
  • Applications running within resource limits are less likely to run out of memory while .NET cleans up unused objects.5
    Addresses out-of-memory exceptions during garbage collection for applications running under job limits.

.NET Fundamentals

For: Applications using UserPrincipal.GetAuthorizationGroups

  • An issue with looking up which groups a user belongs to through a .NET API is addressed.6
    Addresses an issue with UserPrincipal.GetAuthorizationGroups retrieving a user's memberships.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-11-12
Classification
Updates
Type
Cumulative update
Restart
Required
Replaces
KB5041964
Replaced by
KB5049625
VersionFile versionChannel
3.5 2.0.50727.9179 General availability
4.8.1 4.8.9287.0 General availability

Security

No vulnerabilities are listed for this update.

Downloads (Microsoft Update Catalog)

Updated components

49 files changed since the previous update for the same versions.

Top changed componentsFiles
.NET runtime (CLR)12
ASP.NET10

Verified in package: changed files confirm ASP.NET.

Sources

Updated
Cited passages from Microsoft's official notes (6)
  1. 1. Addresses an issue where "The type initializer for ‘System.Web.UI.Util’ threw an exception." error with design-time compilation in Visual Studio for .NET Framework ASP.Net projects. support.microsoft.com
  2. 2. Address an issue where in rare cases where an infinite loop could occur when a thread enters CLR for the first time. support.microsoft.com
  3. 3. Address an issue in cases where incorrect interface call devirtualization could occur when JIT optimizations are enabled. support.microsoft.com
  4. 4. Addresses an issue with a security feature bypass vulnerability when using SecUtility.RandomByte. support.microsoft.com
  5. 5. Addresses an issue with information disclosure with the performance counter. - Addresses an issue with out of memory exceptions during garbage collection while running applications running under job limits. support.microsoft.com
  6. 6. Addresses an issue with .NET API UserPrincipal.GetAuthorizationGroups to retrieve the Membership of a particular user. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 6 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake