Skip to the content
The Update Bureau
.NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 Update
Patch Tuesday

KB5046265

KB5046265: Cumulative update for .NET Framework, versions 3.5 and 4.8, on Windows Server 2022, November 2024. Visual Studio ASP.NET compilation error addressed

In short

The update addresses a Visual Studio design-time compilation error in ASP.NET projects, along with reliability issues in the CLR and .NET APIs.

Does it affect you? Applies to: Windows Server 2022 devices with .NET Framework 3.5 or 4.8 installed.

File version
2.0.50727.9179 · 4.8.4770.0
Restart
Required

What changes

Fixes 7 changes

ASP.NET

Verified in package

For: Developers using Visual Studio for .NET Framework ASP.NET projects

  • The update addresses a Visual Studio design-time compilation error in .NET Framework ASP.NET projects.1
    Addresses the error “The type initializer for ‘System.Web.UI.Util’ threw an exception.”

CLR

5 items
  • The update addresses a rare case where a thread could enter an infinite loop the first time it enters the CLR.2
  • The update addresses incorrect handling of some interface calls when JIT optimizations are enabled.3
    Addresses incorrect interface call devirtualization when JIT optimizations are enabled.
  • The update addresses a security feature bypass issue involving SecUtility.RandomByte.4
  • The update addresses an information disclosure issue involving a performance counter.5
  • The update addresses out-of-memory exceptions during garbage collection in applications running under job limits.6

.NET Fundamentals

For: Applications using UserPrincipal.GetAuthorizationGroups

  • The update addresses an issue retrieving a user's group membership through a .NET API.7
    Addresses an issue with UserPrincipal.GetAuthorizationGroups retrieving a user's membership.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-11-12
Classification
Updates
Type
Cumulative update
Restart
Required
Replaces
KB5041948
Replaced by
KB5049617
VersionFile versionChannel
3.5 2.0.50727.9179 General availability
4.8 4.8.4770.0 General availability

Security

No vulnerabilities are listed for this update.

Downloads (Microsoft Update Catalog)

Updated components

38 files changed since the previous update for the same versions.

Top changed componentsFiles
.NET runtime (CLR)12
ASP.NET10

Verified in package: changed files confirm ASP.NET.

Sources

Updated
Cited passages from Microsoft's official notes (7)
  1. 1. Addresses an issue where "The type initializer for ‘System.Web.UI.Util’ threw an exception." error with design-time compilation in Visual Studio for .NET Framework ASP.Net projects. support.microsoft.com
  2. 2. Address an issue where in rare cases where an infinite loop could occur when a thread enters CLR for the first time. support.microsoft.com
  3. 3. Address an issue in cases where incorrect interface call devirtualization could occur when JIT optimizations are enabled. support.microsoft.com
  4. 4. Addresses an issue with a security feature bypass vulnerability when using SecUtility.RandomByte. support.microsoft.com
  5. 5. Addresses an issue with information disclosure with the performance counter. support.microsoft.com
  6. 6. Addresses an issue with out of memory exceptions during garbage collection while running applications running under job limits. support.microsoft.com
  7. 7. Addresses an issue with .NET API UserPrincipal.GetAuthorizationGroups to retrieve the Membership of a particular user. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 7 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake