Windows 11 KB5022497 .NET Framework 4.8.1 and 3.5 22H2 Rolled out

Windows 11 22H2 obtained cumulative reliability improvements in .NET Framework 3.5 and 4.8.1 on 14/02/203. This release recommends installing and applying this update as a piece of your regular maintenance schedule. KB5022497 is the deliverance that brings bug fixes for CVE-2023-21808 and CVE-2023-21722 vulnerabilities. See – Windows 11 KB5020695 .NET Framework 4.8.1, 4.8, 3.5 update is available.

Full name of the patch is 2023-02 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2 for x64 (KB5022497) where architecture is variable and it can also be ARM64. Let’s see what is new in this release –

Table of Contents

KB5022497 Windows 11 22H2 .NET Framework 4.8.1 and 3.5 changes, bug fixes, and improvements

Here is the changelog –

Improvements and changes

“CVE-2023-21808” – .NET Framework Remote Code Execution Vulnerability

The patch addresses an existing vulnerability in the Microsoft Debug Interface Access aka MSDIA SDK where an untrusted pointer dereference can cause memory corruption. This flaw leads to a crash or remote code execution. To have more knowledge navigate to – CVE-2023-21808.

“CVE-2023-21722” – .NET Framework Denial of Service Vulnerability

The rollout addresses a vulnerability where the Visual Studio WMI Setup Provider Installer can be used by a low-level, local attacker to damage local files that SYSTEM can write to. This penetrability leads to a potential denial of service. To know more about this vulnerability, navigate to – CVE-2023-21722.

Reliability and Quality Improvements

WPF1

Addresses a problem with the propagation of ElementHost control Visible correctly to underlying HwndWrapper.
WPF1 addresses a problem that restores “VirtualizingScrollPanel” scrolling conduct for the CollectionChange event.
The rollout addresses the problem to ignore Win32LastError when calling GetWindowTextLength and GetWindowText methods.
Also, this addresses Null Reference Exception when ToolTip is appearing property that is overridden to always be false.

Networking

KB5022497 LCU addresses an issue in the Socket.EndReceiveFrom method that may lead to AccessViolationException in rare scenarios.

WPF1 refers to Windows Presentation Foundation.

Known issues

Symptom	After receiving this patch, WPF apps’ behavior may be changed. To know more go to – KB5022083
Workaround	To mitigate this bug, follow – KB5022083.

How to download KB5022497 in Windows 11 22H2 and install

1] Using automatic Windows update

Go to Settings > Windows Update and click on Check for updates.
Once the patch is downloaded click on Restart now and wait to complete the installation.

2] Through Microsoft update catalog

Click KB5022497 direct download link.
Locate the correct file compatible with the processor of your system.
Select the Download button.
When a separate page comes up; click on the lone link showing there.
Finally, once downloading is completed, double-click on

windows11.0-kb5022497-x64-ndp481_92ce32e8d1d29d5b572e929f4ff90e85a012b4d6.msu
or
windows11.0-kb5022497-arm64-ndp481_5e26eb6b35476c58b96023b6b1d305c6b8506cb9.msu

Confirm the prompt.

Read – How to Download and Install Update from Microsoft update catalog on Windows 11/10.

That’s all!!