Skip to the content
The Update Bureau
.NET Framework 3.5 / 4.8.1 .NET Framework 3.5 / 4.8.1 Optional preview
Preview

KB5074828

KB5074828: Cumulative update for .NET Framework, versions 3.5 and 4.8.1, on Windows 11 25H2, January 2026. ClickOnce gains SHA384 and SHA512 checks; ARM64 CLR crash addressed

In short

Adds SHA384 and SHA512 verification support for ClickOnce and addresses a case where the .NET runtime could crash on ARM64 devices.

Does it affect you? Applies to: Devices running Windows 11, version 25H2, with .NET Framework 3.5 or 4.8.1 installed. The runtime crash issue concerns ARM64 devices.

File version
2.0.50727.9180 · 4.8.9325.0
Restart
Required

What changes

Fix 1 change

.NET Runtime

  • The update addresses a case where the .NET runtime could crash on ARM64 devices.1
    Addresses cases where the arm64 CLR could crash when code generates and catches a NullReferenceException within the same function.

Improvement 1 change

.NET Runtime

  • ClickOnce verification supports SHA384 and SHA512.2
    Adds verification logic for ClickOnce to support SHA384 and SHA512.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2026-01-29
Classification
Updates
Type
Cumulative update
Restart
Required
Replaces
KB5067931, KB5066613
Replaced by
KB5082417
VersionFile versionChannel
3.5 2.0.50727.9180 General availability
4.8.1 4.8.9325.0 General availability

Security

No vulnerabilities are listed for this update.

Updated components

55 files changed since the previous update for the same versions.

Top changed componentsFiles
.NET runtime (CLR)12
WCF12
Windows Forms2

Sources

Updated
Cited passages from Microsoft's official notes (2)
  1. 1. Addresses an issue in cases where the arm64 CLR could crash when code generates and catches a NullReferenceException within the same function. support.microsoft.com
  2. 2. Addresses an issue to add verification logic for ClickOnce to support SHA384 and SHA512. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Sep 25, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake