The Update BureauKB5049613: Cumulative update for .NET Framework, versions 3.5 and 4.8, on Windows 10 21H2/22H2, January 2025. Remote code execution flaw addressed; rare CLR loop corrected
In short
Addresses a .NET Framework remote code execution vulnerability and a rare issue that could trap a thread in an infinite loop when it first entered the CLR.
Does it affect you? Applies to: Devices running Windows 10, version 21H2 or 22H2, including Windows 10 Enterprise LTSC 2021, with .NET Framework 3.5 or 4.8 installed.
What changes
Fixes 2 changes
.NET Framework
For: devices with .NET Framework 3.5 or 4.8 installed
-
Addresses a remote code execution vulnerability in .NET Framework.1
CVE-2025-21176.
.NET Runtime
For: devices with .NET Framework 3.5 or 4.8 installed
-
Addresses a rare case where a thread entering the .NET runtime for the first time could get stuck in an infinite loop.2
The issue occurs when a thread enters the CLR for the first time.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2025-01-14
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5045936, KB5044020
- Replaced by
- KB5066135
| Version | File version | Channel |
|---|---|---|
| 3.5 | 2.0.50727.9179 | General availability |
| 4.8 | 4.8.4772.0 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
|
Not rated | — |
Downloads (Microsoft Update Catalog)
x64
Windows 10 Enterprise LTSC 2021 / Windows 10, version 22H2
76.1 MB
Arm64
Windows 10 Enterprise LTSC 2021 / Windows 10, version 22H2
47.7 MB
x86
Windows 10 Enterprise LTSC 2021 / Windows 10, version 22H2
47.7 MB
Updated components
58 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| .NET runtime (CLR) | 18 |
| ASP.NET | 15 |
Sources
Updated
Cited passages from Microsoft's official notes (2)
-
1.
This security update addresses a remote code execution vulnerability detailed in CVE-2025-21176.
support.microsoft.com -
2.
Addresses an issue where in rare cases where an infinite loop could occur when a thread enters CLR for the first time.
support.microsoft.com
Checked automatically: 7 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: not passed
A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake