The Redmond rolled out January updates including KB4481483. This security patch is applicable to Microsoft .NET Framework “4.7.2”, “4.7.1”, “4.7”, “4.6.2”, “4.6.1”, “4.6”, “4.5.2” and “3.5” available on every version of Windows Server 2012 as well.
You will automatically receive the Security only patch unless you haven’t disabled or paused the automatic Windows update. Moreover, you can download KB4481483 from Microsoft update catalog as a standalone file.
KB4481483 Security Only updates for .NET Framework Jan 8, 2019 details
KB4480075 resolves CVE-2019-0545 vulnerability in .NET Framework, which led to information disclosure. Such a situation, in turn, permitted a CORS configuration bypass. When a malicious user succeeds in exploiting this vulnerability, he will be able to fetch even the usually restricted content from web-apps. KB4480075 enforces CORS (Cross-origin Resource Sharing) configuration to prevent any bypass and hence, resolve this issue. Check out CVE-2019-0545 in order to know further about this vulnerability.
How to Download KB4481483 and install
You can get KB4481483 update from Windows Software Update Service (WSUS). To do so, simply follow the below steps –
Step-1: In the Start search box, enter Administrative Tools.
Step-2: Select Administrative tools and let it open. Choose Double click on Microsoft Windows Server Update Services 3.0 from the folder.
Step-3: Expand the option ComputerName, and from the options, select Action.
Step-4: Click on Import Updates.
Step-5: Windows Software Update Service will open a browser window where you’ll be asked to install an ActiveX control. In order to continue, you need to install the ActiveX control.
Step-6: Once done, Windows will take you to the Microsoft Update Catalog screen.
Step-7: In the search box, type or paste 4481483 and click Search.
Step 8: Find the .NET Framework package which is compatible with the languages, processes and operating systems in your environment.
Step 9: click on Add. This will add the packages you select to your basket.
Step 10: Click on View Basket.
Step 11: Now select import for bringing the selected packages into your WSUS server.
That’s it and now you have KB4481483 available to be installed via Windows Software Update Service.
Additional details on KB4481483
When you are planning to add language packs, we recommend that you do so before installing KB4481483. Otherwise, you’ll have to reinstall the update in case you happen to install the pack after receiving the updates.
Download KB4481483 security patch for Microsoft .NET Frameworks from Microsoft update catalog.
Source – Release note.