KB5046268: Cumulative update for .NET Framework, versions 3.5 and 4.7.2, on Windows 10 1809 and Windows Server 2019, November 2024. Rare CLR loop and interface-call issues addressed
Addresses several .NET Framework reliability issues, including a rare infinite loop when a thread first enters the CLR. It adds no new security improvements and includes previously released ones.
Does it affect you? Applies to: Devices running Windows 10, version 1809, or Windows Server 2019, with .NET Framework 3.5 or 4.7.2 installed.
What changes
Fixes 5 changes
CLR
For: Applications using .NET Framework
-
A rare issue that could cause an infinite loop when a thread first enters the Common Language Runtime is addressed.1
The issue could occur when a thread enters the CLR for the first time.
-
An issue with interface-call devirtualization is addressed in cases where JIT optimizations are enabled.2
Addresses incorrect interface-call devirtualization when JIT optimizations are enabled.
-
An issue that could bypass a security feature when
SecUtility.RandomByteis used is addressed.3 - An information-disclosure issue involving the performance counter is addressed.4
.NET Fundamentals
For: Applications using .NET Framework
-
An issue affecting retrieval of a user's group membership through
UserPrincipal.GetAuthorizationGroupsis addressed.5The issue involves the .NET APIUserPrincipal.GetAuthorizationGroupsretrieving a particular user's membership.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-11-12
- Classification
- Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5041913
- Replaced by
- KB5049608
| Version | File version | Channel |
|---|---|---|
| 3.5 | 2.0.50727.9066 | General availability |
| 4.7.2 | 4.7.4121.0 | General availability |
Security
No vulnerabilities are listed for this update.
Downloads (Microsoft Update Catalog)
Updated components
34 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| .NET runtime (CLR) | 18 |
Sources
Cited passages from Microsoft's official notes (5)
-
1.
Address an issue where in rare cases where an infinite loop could occur when a thread enters CLR for the first time.
support.microsoft.com -
2.
Address an issue in cases where incorrect interface call devirtualization could occur when JIT optimizations are enabled.
support.microsoft.com -
3.
Addresses an issue with a security feature bypass vulnerability when using SecUtility.RandomByte.
support.microsoft.com -
4.
Addresses an issue with information disclosure with the performance counter.
support.microsoft.com -
5.
Addresses an issue with .NET API UserPrincipal.GetAuthorizationGroups to retrieve the Membership of a particular user.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 5 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 4/5, clarity 3/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake