Microsoft .NET Framework CVE-2017-8759

Apply Microsoft security updates immediately from the official MSRC advisory at https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759, which provides patches for all affected .NET Framework versions across supported Windows operating systems. Microsoft released these patches as part of the September 2017 security update cycle. Organizations should prioritize patching systems accessible to users who handle external documents or emails, as these are primary attack vectors. As a temporary compensating control until patching is complete, implement application whitelisting to prevent execution of untrusted applications, disable .NET SOAP processing if not required for business operations, and enforce email gateway filtering to block suspicious document attachments (particularly those invoking .NET components). User security awareness training should emphasize risks of opening unsolicited documents. Note that blocking specific file types provides only partial protection since the vulnerability can be triggered through multiple .NET-enabled document formats and applications.