March 2022 Internet Explorer Update KB5011486, and NET Desktop Runtime 6.0.3 Update KB5012417

[German]As of March 8, 2022, Microsoft has also released a cumulative security update KB5011486 for Internet Explorer. This closes the vulnerabilities CVE-2022-23299 and CVE-2022-24502. Furthermore there is a .NET Desktop Runtime 6.0.3 update KB5012417. Here is some information about these updates.

Update KB5011486 for Internet Explorer 11

Microsoft has released the security update KB5011486 for Internet Explorer 11 on March 8, 2022. This update closes various vulnerabilities, including:

• CVE-2022-23299: Windows PDEV Elevation of Privilege Vulnerability; see also this Rapid7 article
• CVE-2022-24502: Windows HTML Platforms Security Feature Bypass Vulnerability; see also this Rapid7 article

The Internet Explorer security update is available for the following Windows versions:

• Windows Server 2008 Service Pack 2 (für IE 9)
• Windows 7 Service Pack 1 (für IE 11)
• Windows Server 2008 R2 Service Pack 1 (für IE 11)
• Windows Server 2012 (für IE 11)
• Windows 8.1 (für IE 11)
• Windows Server 2012 R2 (für IE 11)

The update will be distributed via Windows Update for Business, WSUS, as well as the Microsoft Update Catalog, but not via Windows Update, according to Microsoft. The update installation requirements can be found in support article KB5011486.

Starting with Windows 10, the patch is part of the updates for the respective Windows version.

Update KB5012417 .NET 6.0.3 Security Update

Furthermore Microsoft still released the March 2022 updates for NET 6.0.3, .NET 5.0.15 and .NET 3.1.23 according to this article. The following updates were released.

• .NET 6.0.3 Security Update KB5012417, he update is available in the Microsoft Update Catalog
• .NET Core 3.1.23 Security Update KB5012418, he update is available in the Microsoft Update Catalog

Similar articles
Microsoft Office Updates (March 1, 2022)
Microsoft Security Update Summary (March 8, 2022)
Patchday: Windows 10-Updates (March 8, 2022)
Patchday: Windows 11/Server 2022-Updates (March 8, 2022)
Windows 7/Server 2008R2; Windows 8.1/Server 2012R2: Updates (March 8, 2022)
Patchday: Microsoft Office Updates (March 8, 2022)