Helen Hou-Sandi writes on Make WordPress Core that there is a quiet RC2 now available – it is a fair number of commits (50+), so please take a look through those and test as you can.

This may interest you:   Deny vulnerable WordPress plugins using Windows Server File Server Resource Manager's File Screens