Security Vulnerabilities in .NET

Problem Description

Does the COMSOL software use .NET and, if so, is it affected by known security vulnerabilities in .NET? Can the .NET software used by COMSOL be updated before the next COMSOL product update?

Solution

Summary

The COMSOL software uses .NET for some functionality on Windows systems.

Install the latest product updates for the COMSOL software and keep the .NET software on the system up to date. If needed, see below for more information about .NET security vulnerabilities, the .NET software used by supported COMSOL versions, and how to update .NET.

Security vulnerabilities

Security vulnerabilities affecting the .NET runtime are listed on the .NET runtime Security Advisories page. Security updates for .NET Framework are listed in the .NET Framework release notes.

Not all security vulnerabilities of .NET apply to the COMSOL software, since the COMSOL software does not use all .NET functionality and may not have enabled the affected features.

Vulnerability assessments

The following notable vulnerabilities are fixed in the latest security updates of .NET but may affect .NET software used by the latest supported COMSOL versions:

• CVE-2026-111497 (Brotli2Shell)
  Assessment: Not affected
  This vulnerability affects Brotli decompression in the .NET runtime. COMSOL software does not expose .NET Brotli decompression to untrusted input and is therefore not affected. The vulnerability does not affect .NET Framework.

Use of .NET in COMSOL software

The following COMSOL software uses .NET on Windows: COMSOL Multiphysics, COMSOL Client, and COMSOL Runtime. No .NET functionality is used by COMSOL Server, the COMSOL Multiphysics server, the COMSOL Documentation server, or the Model Manager server.

Updating .NET

COMSOL 6.4

COMSOL 6.4 requires a system-wide .NET 8 runtime and automatically rolls forward to later .NET 8 runtime versions. Use the operating system facilities for installing software and security updates to keep the installed .NET runtime up to date.

Alternatively, a current .NET 8 runtime can be obtained from the .NET 8 download page. Select a .NET Runtime version in the 8.0 release line for the applicable operating system and processor architecture.

The installed .NET runtimes and their versions can be determined by running dotnet --list-runtimes. The output lists the installed runtime versions.

COMSOL 6.3 and earlier

COMSOL 6.3 and earlier use .NET Framework on Windows. Updates to .NET Framework are provided through the normal Windows servicing mechanisms.

The installed .NET Framework version can be determined using the instructions on Microsoft's How to: Determine which .NET Framework versions are installed page.

種類ごとに閲覧