{"id":18735,"date":"2018-08-14T10:05:48","date_gmt":"2018-08-14T17:05:48","guid":{"rendered":"https:\/\/blogs.msdn.microsoft.com\/dotnet\/?p=18735"},"modified":"2019-02-20T11:19:28","modified_gmt":"2019-02-20T18:19:28","slug":"august-2018-security-and-quality-rollup","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/dotnet\/august-2018-security-and-quality-rollup\/","title":{"rendered":".NET Framework August 2018 Security and Quality Rollup"},"content":{"rendered":"

Today, we are releasing the August 2018 Security and Quality Rollup.\u00a0\u00a0This release also addressed the July issues explained in\u00a0KB 4345913<\/a> and Advisory on July 2018 .NET Framework Updates<\/a>.<\/p>\n

<\/a>Security<\/h2>\n

<\/a>CVE-2018-8360 \u2013 Windows Information Disclosure Vulnerability<\/h3>\n

This update resolves an information disclosure vulnerability in Microsoft .NET Framework that could allow an attacker to access information in multi-tenant environments. The vulnerability is caused when .NET Framework is used in high-load\/high-density network connections in which content from one stream can blend into another stream.<\/p>\n

To exploit the vulnerability, an attacker who can access one tenant in a high-load\/high-density environment could potentially trigger multi-tenanted data exposure from one customer to another.<\/p>\n

This security update addresses the vulnerability by correcting the way that .NET Framework handles high-load\/high-density network connections.<\/p>\n

CVE-2018-8360<\/a><\/p>\n

<\/a>Quality and Reliability<\/h2>\n

This release contains the following quality and reliability improvements.<\/p>\n

<\/a>CLR<\/h4>\n