Microsoft patches critical ASP.NET Core privilege escalation vulnerability

Microsoft issues out-of-band patch for critical security flaw in update to ASP.NET Core

CVE-2026-40372 ASP.NET Core Elevation of Privilege Vulnerability