Updated: September 21, 2018

• SharePoint workflows may stop working after installing this update.  See SharePoint workflows stop working after you install .NET security updates for CVE-2018-8421 for further guidance.

Today, we are releasing the September 2018 Security and Quality Rollup.

Security

CVE-2018-8421 – Windows Remote Code Execution Vulnerability

This security update resolves a vulnerability in Microsoft .NET Framework that could allow remote code execution when .NET Framework processes untrusted input. An attacker who successfully exploits this vulnerability in software by using .NET Framework could take control of an affected system. The attacker could then install programs; view, change, or delete data; or create new accounts that have full user rights. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights.

CVE-2018-8421

Getting the Update

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, Microsoft Update Catalog, and Docker.

Microsoft Update Catalog

You can get the update via the Microsoft Update Catalog. For Windows 10, .NET Framework updates are part of the Windows 10 Monthly Rollup.

The following table is for Windows 10 and Windows Server 2016+.

The following table is for earlier Windows and Windows Server versions.

Docker Images

We are updating the following .NET Framework Docker images for today’s release:

• microsoft/aspnet
• microsoft/dotnet-framework
• microsoft/dotnet-framework-samples

Note: Look at the “Tags” view in each repository to see the updated Docker image tags.

Previous Monthly Rollups

The last few .NET Framework Monthly updates are listed below for your convenience:

• August Preview of Quality Rollup
• August Security and Quality Rollup
• July 2018 Update
• June 2018 Security and Quality Rollup