Does this AKS Windows Server 2022 image contain the fix for CVE-2020-0646, and if so, which update or binary version confirms remediation?

Rachel 0 Reputation points
2026-10-12T12:10:58.2733333+00:00

CVE: CVE-2020-0646

OS: Windows Server 2022

AKS node image: AKSWindows-2022-containerd-20348.5622.260909

.NET Framework: 4.8.04161

Release key: 528449

Installed KBs:

KB5122881

KB5122882

KB5126050

Does this AKS Windows Server 2022 image contain the fix for CVE-2020-0646, and if so, which update or binary version confirms remediation?

Azure Kubernetes Service
Azure Kubernetes Service

An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.

0 comments No comments

1 answer

Sort by: Newest
  1. Krishnan Ramanathan 0 Reputation points Microsoft Employee
    2026-10-13T02:12:29.5033333+00:00

    Yes. Based on the Microsoft CVE applicability data and the OS build in that AKS image, AKSWindows-2022-containerd-20348.5622.260909 should not be vulnerable to CVE-2020-0646.

    CVE-2020-0646 is a .NET framework vulnerability which was patched back in 2020 itself and primarily affected Windows 2016 and older OS images: https://support.microsoft.com/en-us/servicing/dotnetframework/windows-10/1809/2020/01/january-14-2020-kb4535101-cumulative-update-for-net-framework-3-5-4-7-2-and-4-8-for-windows-10-versi

    This remediation is natively integrated into the base Windows 2022 image.

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.