NET Framework security updates

Question

Hi Experts

i have below vulnerabilities detected on many servers. vulnerabilities vary from server to server. below is just an example of vulnerabilities detected on one server. how can i fix these. Is there a way I can download latest offline .net framework /core updates which will fix all the old .net framework/core vulnerabilities.

Microsoft .NET Framework And .NET Core Security Updates for July 2020
Microsoft .NET Core Security Update May 2020
Microsoft .NET Framework Denial of Service Vulnerability - February 2021

Answer 1

Please visit MSRC page to check whether fixes are available. You can check with either full/partial name of vulnerability or the CVE number emitted by checker. The link I provided goes to the third one.

Btw, the easiest way is to enable Windows Update and let them install patches for you. If you have concern on whether the update may crash your server, you should install it on staging server (the server that you do testing of new deployments, ought to be the same spec. as the production server) first to see if it works. You can control the rollout of specific patches to servers with WSUS.