QID 92130
Date Published: 2024-04-10
QID 92130: Microsoft .NET Framework Update for April 2024
A Remote Code Execution Vulnerability exist in Microsoft .Net Framework.
Following KBs are covered in this detection:
5037034
5037040
5037039
5037127
5037038
5036899
5037033
5036609
5037036
5037035
5037037
5037041
5037128
5036620
This security update is rated Important for supported versions of Microsoft .NET Framework.
.NET Framework 2.0, 3.0, 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8, and 4.8.1
QID Detection Logic (Authenticated):
Checks for vulnerable file version of ntoskrnl.exe or Mscorlib.dll or System.dll or System.web.dll for the respective .Net Framework KBs
Successful exploitation may allow a attacker to perform Remote Code Execution.
Solution
Customers are advised to refer to CVE-2024-21409for more details pertaining to these vulnerabilities.
Vendor References
- 5036609 -
support.microsoft.com/en-us/topic/april-9-2024-kb5036609-cumulative-update-for-net-framework-4-8-for-windows-10-version-1607-and-windows-server-2016-4f892f31-1260-42f4-ba83-60c901c47b4b - 5036620 -
support.microsoft.com/en-us/topic/april-9-2024-kb5036620-cumulative-update-for-net-framework-3-5-and-4-8-1-for-windows-11-version-22h2-and-windows-11-version-23h2-20c41b49-cd82-4fed-a1b1-0e9ce5a21b5d
- 5036899 -
support.microsoft.com/en-us/topic/april-9-2024-kb5036899-os-build-14393-6897-6a0b7cdd-dd67-4ef8-8c38-8a936b2f952c
- 5037033 -
support.microsoft.com/en-us/topic/april-9-2024-kb5037033-cumulative-update-for-net-framework-3-5-4-8-and-4-8-1-for-windows-server-2022-c47f0f6a-55e4-46ba-86c2-9316fd94e6d4
- 5037034 -
support.microsoft.com/en-us/topic/april-9-2024-kb5037034-cumulative-update-for-net-framework-3-5-4-7-2-and-4-8-for-windows-10-version-1809-and-windows-server-2019-a05337da-926e-4ea5-ba09-9cdd24596e9c
- 5037035 -
support.microsoft.com/en-us/topic/april-9-2024-kb5037035-cumulative-update-for-net-framework-3-5-4-8-and-4-8-1-for-windows-10-version-21h2-27962255-60e0-4797-8260-9f95120295bc
- 5037036 -
support.microsoft.com/en-us/topic/april-9-2024-kb5037036-cumulative-update-for-net-framework-3-5-4-8-and-4-8-1-for-windows-10-version-22h2-6b26dc85-2dc4-4d15-abd9-4b16dd8d7f6a
- 5037037 -
support.microsoft.com/en-us/topic/april-9-2024-kb5037037-cumulative-update-for-net-framework-3-5-4-8-and-4-8-1-for-windows-11-version-21h2-e29443ef-d166-49a5-b83d-821f46c50e4d
- 5037038 -
support.microsoft.com/en-us/topic/april-9-2024-security-and-quality-rollup-for-net-framework-3-5-1-4-6-2-4-7-4-7-1-4-7-2-4-8-for-windows-server-2008-r2-sp1-kb5037038-152d7610-66f8-4752-b503-0bd9464ad55b
- 5037039 -
support.microsoft.com/en-us/topic/april-9-2024-security-and-quality-rollup-for-net-framework-3-5-4-6-2-4-7-4-7-1-4-7-2-4-8-for-windows-server-2012-kb5037039-f7cf6e35-0a1e-4f8d-a308-cc014150f1f2
- 5037040 -
support.microsoft.com/en-us/topic/april-9-2024-security-and-quality-rollup-for-net-framework-3-5-4-6-2-4-7-4-7-1-4-7-2-4-8-for-windows-server-2012-r2-kb5037040-c8dfaf9e-6ac6-4cc3-bb12-bed722610d22
- 5037041 -
support.microsoft.com/en-us/topic/april-9-2024-security-and-quality-rollup-for-net-framework-2-0-3-0-3-5-sp1-4-6-2-for-windows-server-2008-sp2-kb5037041-aba70d39-e163-4ba3-b770-6e37fb6cd3ac
- 5037127 -
support.microsoft.com/en-us/topic/april-9-2024-security-only-update-for-net-framework-3-5-1-4-6-2-4-7-4-7-1-4-7-2-4-8-for-windows-server-2008-r2-sp1-kb5037127-2f748164-3053-41aa-b5f2-42f8b9f3ddb3
- 5037128 -
support.microsoft.com/en-us/topic/april-9-2024-security-only-update-for-net-framework-2-0-3-0-3-5-sp1-4-6-2-for-windows-server-2008-sp2-kb5037128-19f7a85f-a04f-4085-b68e-f2d8fb7196bd
CVEs related to QID 92130
Software Advisories
| Advisory ID | Software | Component | Link |
|---|---|---|---|
| CVE-2024-21409 |
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21409 |