Security Vulnerabilities fixed in Microsoft .NET Framework MS16-019

Description

This security update resolves vulnerabilities in Microsoft .NET Framework. The more severe of the vulnerabilities could cause denial of service if an attacker inserts specially crafted XSLT into a client-side XML web part, causing the server to recursively compile XSLT transforms.

Affected Applications

Windows 7
Windows Server 2008 R2
Windows 8.1
Windows Server 2012
Windows Server 2012 R2
Windows RT 8.1
Windows 10

CVE References

CVE-2016-0033 CVE-2016-0047

Other References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-0033