Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I can imagine a scenario where Microsoft will create a security patch for some versions of .NET and not others. This might occur in occasions it's too expensive to regression test and back port all the changes.

Are there any examples of some security fixes created for one framework and not another?

This information would be used to access risk of legacy .NET applications that have not been migrated to the latest and most supported version of the .NET framework.

share|improve this question
If I recall correctly, yes it possible that a vendor will decide to roll out a security fix for one version and delay for an older version. I don't know if this has happened specifically for .NET framework. – Kapish M Jun 13 '12 at 13:06
up vote 3 down vote accepted

If you visit you'll see Microsoft's support lifecycle for the .NET framework.

As you can see, many of the older versions are no longer supported, so Microsoft do not promise they will issue security patches for them, and you should no longer use them.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.