Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug

Microsoft has released out-of-band (OOB) security updates to patch a critical ASP.NET Core privilege escalation vulnerability. [...]

Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required. The

When authentication fails, things can go very, very wrong.

On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow threat actors to execute arbitrary code via cross-site

<h1> CVE-2026-65660: a SharePoint code injection reachable with an ordinary user account </h1> <p>SharePoint is rarely treated as a perimeter system, which is why a flaw in it

<h1> CVE-2026-65660: a SharePoint flaw that never writes a file to disk </h1> <p>Most incident response playbooks for a web server compromise start with the file system. Analysts

A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables authenticated remote code execution, according

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's