KB5046266: Cumulative update for .NET Framework, version 4.8, on Windows 10 1607 and Windows Server 2016, November 2024. ASP.NET design-time errors and runtime failures addressed

For: Developers using Visual Studio for ASP.NET projects

• Visual Studio could show an error while compiling an ASP.NET project at design time.¹
  Addresses the “The type initializer for ‘System.Web.UI.Util’ threw an exception.” error with design-time compilation in Visual Studio for .NET Framework ASP.NET projects.

• In rare cases, an application could get stuck in an endless loop the first time a thread enters the .NET runtime.²
  Addresses an issue where an infinite loop could occur when a thread enters the CLR for the first time.
• The runtime could choose an incorrect implementation for an interface call when optimizations are enabled.³
  Addresses incorrect interface call devirtualization when JIT optimizations are enabled.
• A security protection could be bypassed when applications use a .NET function that generates random bytes.⁴
  Addresses a security feature bypass vulnerability when using SecUtility.RandomByte.
• A system performance reading could disclose information it should not reveal.⁵
  Addresses an information disclosure issue with the performance counter.
• Some applications could run out of memory while the .NET runtime cleans up unused objects under job limits.⁶
  Addresses out-of-memory exceptions during garbage collection in applications running under job limits.

For: Applications using UserPrincipal.GetAuthorizationGroups

• Retrieving a user's group memberships through a .NET API could have problems.⁷
  Addresses an issue with the .NET API UserPrincipal.GetAuthorizationGroups when retrieving the membership of a particular user.