Security News Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug TheHackerNews Daniel Bender 22 Apr 2026 CVE-2026-40372 scores 9.1 due to cryptographic flaw in ASP.NET Core 10.0.0–10.0.6, risking SYSTEM access.