The Hacker News

Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug

"A regression in the Microsoft.AspNetCore.DataProtection 10.0.0-10.0.6 NuGet packages cause the managed authenticated ...

Microsoft issues emergency update for macOS and Linux ASP.NET threat

Microsoft describes ASP.NET Core as a “high-performance” Web development framework for writing .Net apps that run on Windows, ...
CSO Online

Microsoft issues out-of-band patch for critical security flaw in update to ASP.NET Core

Patching is not enough: applications embedding the insecure library will need to be rebuilt, and affected tokens and cookies ...

Microsoft releases emergency patches for critical ASP.NET flaw

Microsoft has released out-of-band (OOB) security updates to patch a critical ASP.NET Core privilege escalation vulnerability ...
Hosted on MSN

Microsoft issues emergency fix for critical ASP.NET Core flaw

Microsoft has released an out-of-band fix for CVE-2026-40372, a critical ASP.NET Core vulnerability with a CVSS score of 9.1 that could grant SYSTEM privileges. The flaw stems from improper ...

Microsoft calls time on ASP.NET Core 2.3 on .NET Framework

Microsoft has set an end-of-support date of April 7, 2027, for ASP.NET Core 2.3, the only supported version on .NET Framework, even though .NET Framework (and the original ASP.NET) will continue to be ...