diff --git a/eng/Dependencies.props b/eng/Dependencies.props
index 9587cc3b1214..a74153707b6a 100644
--- a/eng/Dependencies.props
+++ b/eng/Dependencies.props
@@ -80,12 +80,6 @@ and are generated based on the last package release.
     <LatestPackageReference Include="System.Threading.Channels" />
     <LatestPackageReference Include="System.ValueTuple" />
 
-    <!-- Runtime packages referenced only for exclusions -->
-    <LatestPackageReference Include="Microsoft.Win32.SystemEvents" />
-    <LatestPackageReference Include="System.Drawing.Common" />
-    <LatestPackageReference Include="System.Security.Permissions" />
-    <LatestPackageReference Include="System.Windows.Extensions" />
-
     <!-- Runtime packages required for crossgen -->
     <LatestPackageReference Include="Microsoft.NETCore.App.Runtime.win-x64" />
     <LatestPackageReference Include="Microsoft.NETCore.App.Runtime.win-x86" />
diff --git a/eng/Version.Details.xml b/eng/Version.Details.xml
index 420744e6cf9e..ce7c8ddb0be3 100644
--- a/eng/Version.Details.xml
+++ b/eng/Version.Details.xml
@@ -177,10 +177,6 @@
       <Uri>https://github.com/dotnet/runtime</Uri>
       <Sha>2d80343c0f0d8c800045b55fe00b37cbe1279dcd</Sha>
     </Dependency>
-    <Dependency Name="Microsoft.Win32.SystemEvents" Version="7.0.0-alpha.1.21472.1">
-      <Uri>https://github.com/dotnet/runtime</Uri>
-      <Sha>2d80343c0f0d8c800045b55fe00b37cbe1279dcd</Sha>
-    </Dependency>
     <Dependency Name="Microsoft.Internal.Runtime.AspNetCore.Transport" Version="7.0.0-alpha.1.21472.1">
       <Uri>https://github.com/dotnet/runtime</Uri>
       <Sha>2d80343c0f0d8c800045b55fe00b37cbe1279dcd</Sha>
@@ -197,10 +193,6 @@
       <Uri>https://github.com/dotnet/runtime</Uri>
       <Sha>2d80343c0f0d8c800045b55fe00b37cbe1279dcd</Sha>
     </Dependency>
-    <Dependency Name="System.Drawing.Common" Version="7.0.0-alpha.1.21472.1">
-      <Uri>https://github.com/dotnet/runtime</Uri>
-      <Sha>2d80343c0f0d8c800045b55fe00b37cbe1279dcd</Sha>
-    </Dependency>
     <Dependency Name="System.IO.Pipelines" Version="7.0.0-alpha.1.21472.1">
       <Uri>https://github.com/dotnet/runtime</Uri>
       <Sha>2d80343c0f0d8c800045b55fe00b37cbe1279dcd</Sha>
@@ -233,10 +225,6 @@
       <Uri>https://github.com/dotnet/runtime</Uri>
       <Sha>2d80343c0f0d8c800045b55fe00b37cbe1279dcd</Sha>
     </Dependency>
-    <Dependency Name="System.Security.Permissions" Version="7.0.0-alpha.1.21472.1">
-      <Uri>https://github.com/dotnet/runtime</Uri>
-      <Sha>2d80343c0f0d8c800045b55fe00b37cbe1279dcd</Sha>
-    </Dependency>
     <Dependency Name="System.ServiceProcess.ServiceController" Version="7.0.0-alpha.1.21472.1">
       <Uri>https://github.com/dotnet/runtime</Uri>
       <Sha>2d80343c0f0d8c800045b55fe00b37cbe1279dcd</Sha>
@@ -253,10 +241,6 @@
       <Uri>https://github.com/dotnet/runtime</Uri>
       <Sha>2d80343c0f0d8c800045b55fe00b37cbe1279dcd</Sha>
     </Dependency>
-    <Dependency Name="System.Windows.Extensions" Version="7.0.0-alpha.1.21472.1">
-      <Uri>https://github.com/dotnet/runtime</Uri>
-      <Sha>2d80343c0f0d8c800045b55fe00b37cbe1279dcd</Sha>
-    </Dependency>
     <Dependency Name="Microsoft.Extensions.DependencyModel" Version="7.0.0-alpha.1.21472.1">
       <Uri>https://github.com/dotnet/runtime</Uri>
       <Sha>2d80343c0f0d8c800045b55fe00b37cbe1279dcd</Sha>
diff --git a/eng/Versions.props b/eng/Versions.props
index c9f762756031..27bca47d5924 100644
--- a/eng/Versions.props
+++ b/eng/Versions.props
@@ -107,11 +107,9 @@
     <MicrosoftExtensionsOptionsVersion>7.0.0-alpha.1.21472.1</MicrosoftExtensionsOptionsVersion>
     <MicrosoftExtensionsPrimitivesVersion>7.0.0-alpha.1.21472.1</MicrosoftExtensionsPrimitivesVersion>
     <MicrosoftInternalRuntimeAspNetCoreTransportVersion>7.0.0-alpha.1.21472.1</MicrosoftInternalRuntimeAspNetCoreTransportVersion>
-    <MicrosoftWin32SystemEventsVersion>7.0.0-alpha.1.21472.1</MicrosoftWin32SystemEventsVersion>
     <SystemDiagnosticsDiagnosticSourceVersion>7.0.0-alpha.1.21472.1</SystemDiagnosticsDiagnosticSourceVersion>
     <SystemDiagnosticsEventLogVersion>7.0.0-alpha.1.21472.1</SystemDiagnosticsEventLogVersion>
     <SystemDirectoryServicesProtocolsVersion>7.0.0-alpha.1.21472.1</SystemDirectoryServicesProtocolsVersion>
-    <SystemDrawingCommonVersion>7.0.0-alpha.1.21472.1</SystemDrawingCommonVersion>
     <SystemIOPipelinesVersion>7.0.0-alpha.1.21472.1</SystemIOPipelinesVersion>
     <SystemNetHttpJsonVersion>7.0.0-alpha.1.21472.1</SystemNetHttpJsonVersion>
     <SystemNetHttpWinHttpHandlerVersion>7.0.0-alpha.1.21472.1</SystemNetHttpWinHttpHandlerVersion>
@@ -120,12 +118,10 @@
     <SystemRuntimeCompilerServicesUnsafeVersion>7.0.0-alpha.1.21472.1</SystemRuntimeCompilerServicesUnsafeVersion>
     <SystemSecurityCryptographyPkcsVersion>7.0.0-alpha.1.21472.1</SystemSecurityCryptographyPkcsVersion>
     <SystemSecurityCryptographyXmlVersion>7.0.0-alpha.1.21472.1</SystemSecurityCryptographyXmlVersion>
-    <SystemSecurityPermissionsVersion>7.0.0-alpha.1.21472.1</SystemSecurityPermissionsVersion>
     <SystemServiceProcessServiceControllerVersion>7.0.0-alpha.1.21472.1</SystemServiceProcessServiceControllerVersion>
     <SystemTextEncodingsWebVersion>7.0.0-alpha.1.21472.1</SystemTextEncodingsWebVersion>
     <SystemTextJsonVersion>7.0.0-alpha.1.21472.1</SystemTextJsonVersion>
     <SystemThreadingChannelsVersion>7.0.0-alpha.1.21472.1</SystemThreadingChannelsVersion>
-    <SystemWindowsExtensionsVersion>7.0.0-alpha.1.21472.1</SystemWindowsExtensionsVersion>
     <!-- Only listed explicitly to workaround https://github.com/dotnet/cli/issues/10528 -->
     <MicrosoftNETCorePlatformsVersion>7.0.0-alpha.1.21472.1</MicrosoftNETCorePlatformsVersion>
     <!-- Packages from dotnet/efcore -->
diff --git a/src/Framework/App.Ref/src/Microsoft.AspNetCore.App.Ref.csproj b/src/Framework/App.Ref/src/Microsoft.AspNetCore.App.Ref.csproj
index ac853cbe3328..2b4d5e4b42b5 100644
--- a/src/Framework/App.Ref/src/Microsoft.AspNetCore.App.Ref.csproj
+++ b/src/Framework/App.Ref/src/Microsoft.AspNetCore.App.Ref.csproj
@@ -72,14 +72,6 @@ This package is an internal implementation of the .NET Core SDK and is not meant
       SkipGetTargetFrameworkProperties="true"
       UndefineProperties="TargetFramework;TargetFrameworks;RuntimeIdentifier;PublishDir" />
 
-    <!-- Omit System.Security.Permissions closure. https://github.com/dotnet/runtime/issues/54341
-         It is brought in by System.Security.Cryptography.Xml for netstandard2.0 compatibility
-         but not required in net7.0 since the types required exist in System.Security.AccessControl. -->
-    <Reference Include="Microsoft.Win32.SystemEvents" ExcludeAssets="All" />
-    <Reference Include="System.Drawing.Common" ExcludeAssets="All" />
-    <Reference Include="System.Security.Permissions" ExcludeAssets="All" />
-    <Reference Include="System.Windows.Extensions" ExcludeAssets="All" />
-
     <!-- Enforce build order. Targeting pack needs to bundle information about the runtime. -->
     <ProjectReference Include="..\..\App.Runtime\src\Microsoft.AspNetCore.App.Runtime.csproj">
       <ReferenceOutputAssembly>false</ReferenceOutputAssembly>
@@ -131,14 +123,8 @@ This package is an internal implementation of the .NET Core SDK and is not meant
           BeforeTargets="_GetPackageFiles"
           DependsOnTargets="ResolveReferences;FindReferenceAssembliesForReferences">
     <ItemGroup>
-      <!-- Exclude transitive external dependencies that are not directly referenced in AspNetCore or Runtime. -->
-      <_DisallowedReferenceAssemblies Include="
-          Microsoft.Win32.SystemEvents.dll;
-          System.Drawing.Common.dll;
-          System.Net.Quic.dll;
-          System.Security.Cryptography.Pkcs.dll;
-          System.Security.Permissions.dll;
-          System.Windows.Extensions.dll" />
+      <!-- Exclude a dependency that we don't want to expose. -->
+      <_DisallowedReferenceAssemblies Include="System.Net.Quic.dll" />
       <_AvailableRuntimeRefAssemblies Include="$(RuntimeTransportReferenceDirectory)*.dll"
           Exclude="@(_DisallowedReferenceAssemblies->'$(RuntimeTransportReferenceDirectory)%(Filename)%(Extension)')" />
     </ItemGroup>
@@ -148,18 +134,22 @@ This package is an internal implementation of the .NET Core SDK and is not meant
     </JoinItems>
 
     <ItemGroup>
-      <!-- Again, ignore ref/ assemblies provided in the transport package that we don't want in this package. -->
+      <!--
+        Grab full dependency closure but exclude Microsoft.NETCore.App.Ref assets (avoid duplicates) and
+        Microsoft.Internal.Runtime.AspNetCore.Transport assets (almost all added just below).
+
+        Filename exclusions are due to implementation assemblies creeping into the closure. Reference assemblies
+        for all but System.Security.Cryptography.Pkcs are available in the transport package.
+      -->
       <AspNetCoreReferenceAssemblyPath
           Include="@(ReferencePathWithRefAssemblies)"
           Exclude="
-            @(_ReferencedRuntimeRefAssemblies);
             @(ReferencePathWithRefAssemblies->WithMetadataValue('NuGetPackageId', 'Microsoft.NETCore.App.Ref'));
-            @(ReferencePathWithRefAssemblies->WithMetadataValue('Filename', 'Microsoft.Win32.SystemEvents'));
-            @(ReferencePathWithRefAssemblies->WithMetadataValue('Filename', 'System.Drawing.Common'));
-            @(ReferencePathWithRefAssemblies->WithMetadataValue('Filename', 'System.Net.Quic'));
+            @(ReferencePathWithRefAssemblies->WithMetadataValue('NuGetPackageId', 'Microsoft.Internal.Runtime.AspNetCore.Transport'));
+            @(ReferencePathWithRefAssemblies->WithMetadataValue('Filename', 'System.Diagnostics.EventLog'));
+            @(ReferencePathWithRefAssemblies->WithMetadataValue('Filename', 'System.IO.Pipelines'));
             @(ReferencePathWithRefAssemblies->WithMetadataValue('Filename', 'System.Security.Cryptography.Pkcs'));
-            @(ReferencePathWithRefAssemblies->WithMetadataValue('Filename', 'System.Security.Permissions'));
-            @(ReferencePathWithRefAssemblies->WithMetadataValue('Filename', 'System.Windows.Extensions'));" />
+            @(ReferencePathWithRefAssemblies->WithMetadataValue('Filename', 'System.Security.Cryptography.Xml'))" />
 
       <AspNetCoreReferenceAssemblyPath
           Include="@(_ReferencedRuntimeRefAssemblies->'$(RuntimeTransportReferenceDirectory)%(FileName)%(Extension)')" />
diff --git a/src/Framework/App.Runtime/src/Microsoft.AspNetCore.App.Runtime.csproj b/src/Framework/App.Runtime/src/Microsoft.AspNetCore.App.Runtime.csproj
index d0fd38f161fd..aeb3c08f1382 100644
--- a/src/Framework/App.Runtime/src/Microsoft.AspNetCore.App.Runtime.csproj
+++ b/src/Framework/App.Runtime/src/Microsoft.AspNetCore.App.Runtime.csproj
@@ -121,14 +121,6 @@ This package is an internal implementation of the .NET Core SDK and is not meant
       <IncludeAssets>Runtime;Native</IncludeAssets>
     </Reference>
 
-    <!-- Omit System.Security.Permissions closure. https://github.com/dotnet/runtime/issues/54341
-         It is brought in by System.Security.Cryptography.Xml for netstandard2.0 compatibility
-         but not required in net7.0 since the types required exist in System.Security.AccessControl. -->
-    <Reference Include="Microsoft.Win32.SystemEvents" ExcludeAssets="All" />
-    <Reference Include="System.Drawing.Common" ExcludeAssets="All" />
-    <Reference Include="System.Security.Permissions" ExcludeAssets="All" />
-    <Reference Include="System.Windows.Extensions" ExcludeAssets="All" />
-
     <Reference Condition="'$(CrossgenOutput)' == 'true'"
         Include="Microsoft.NETCore.App.Runtime.$(RuntimeIdentifier)"
         ExcludeAssets="All"