← CVE Intelligence

CVE-2026-40372

ASP.NET Core Elevation of Privilege Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / productVersions
Microsoft / ASP.NET Core 10.0affected 10.0 before 10.0.7
Microsoft / Microsoft Visual Studio 2026 version 18.5affected 18.5.0 before 18.5.2

CWE

CWE-347

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in ASP.NET Core due to improper verification of cryptographic signatures. An unauthorized attacker can exploit this vulnerability remotely over a network, leading to privilege escalation.