KB5066133: Cumulative update for .NET Framework, versions 3.5 and 4.8.1, on Windows 11 23H2, October 2025. Information exposure flaw addressed in framework libraries
In short
Addresses a flaw that could expose information in .NET Framework 3.5 and 4.8.1. Windows Update installs it automatically.
Does it affect you? Applies to: Devices running Windows 11, version 22H2 or 23H2, with .NET Framework 3.5 or 4.8.1 installed.
What changes
Fix 1 change
.NET Framework
-
The update addresses a flaw that could expose information.1
CVE-2025-55248 is an information disclosure vulnerability.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2025-10-14
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5064403, KB5056580, KB5049624
- Replaced by
- KB5082424
| Version | File version | Channel |
|---|---|---|
| 3.5 | 2.0.50727.9180 | General availability |
| 4.8.1 | 4.8.9320.0 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability
|
Important | 4.8 |
Downloads (Microsoft Update Catalog)
x64
Windows 11, version 23H2
72.4 MB
Arm64
Windows 11, version 23H2
89.3 MB
Updated components
62 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| WPF | 22 |
| ASP.NET | 10 |
Sources
Updated
Cited passages from Microsoft's official notes (1)
-
1.
This security update addresses an information disclosure vulnerability detailed in CVE-2025-55248.
support.microsoft.com
Checked automatically: 7 of 8 checks passed, 1 quoted passage · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: not passed
A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake