Apr 232026 Microsoft Patches Critical ASP.NET Core CVE-2026–40372 Privilege Escalation Bug CVE-2026–40372 scores 9.1 due to cryptographic flaw in ASP.NET Core 10.0.0–10.0.6, risking SYSTEM access.