


If you used any workaround or mitigations for this issue, they are no longer needed, and we recommend you remove them. This issue has been resolved in the JSecurity and Quality Rollup and Cumulative Update. For more information about this issue, see KB5022083 For more information please see CVE-2023-21722.įor a list of improvements that were released with this update, please see the article links in the Additional Information section of this article.Īfter installing this update, WPF apps may have a change in behavior. This security update addresses a vulnerability where the Visual Studio WMI Setup Provider Installer can be used by a low level, local attacker to corrupt local files that SYSTEM can writ to, leading to a potential denial of service. NET Framework Denial of Service Vulnerability This security update addresses a vulnerability in the MSDIA SDK where an untrusted pointer dereference can cause memory corruption, leading to a crash or remove code execution. NET Framework Remote Code Execution Vulnerability This article describes the Cumulative Update for 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2.ĬVE-2023-21808. NET Framework 3.5, 4.8 and 4.8.1 Summary
