{"id":78037,"date":"2026-04-26T13:56:58","date_gmt":"2026-04-26T10:56:58","guid":{"rendered":"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/"},"modified":"2026-04-26T13:57:00","modified_gmt":"2026-04-26T10:57:00","slug":"microsoft-asp-net-core-vulnerability-emergency-patch","status":"publish","type":"post","link":"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/","title":{"rendered":"Microsoft Issues Emergency Patch for ASP.NET Core Vulnerability on macOS and Linux"},"content":{"rendered":"<p class=\"wp-block-paragraph\">An ASP.NET Core vulnerability has prompted Microsoft to release an emergency patch Tuesday for a high-severity <a href=\"\/category\/cybersecurity\/\">cybersecurity<\/a> flaw that allows unauthenticated attackers to gain SYSTEM privileges on macOS and Linux devices. The vulnerability, tracked as CVE-2026-40372, affects versions 10.0.0 through 10.0.6 of the Microsoft.AspNetCore.DataProtection NuGet package, a component of the web development framework.<\/p>\n\n<h2 class=\"wp-block-heading\">The Technical Flaw<\/h2>\n\n<p class=\"wp-block-paragraph\">The vulnerability stems from faulty verification of cryptographic signatures within the ASP.NET Core vulnerability framework. It exploits a regression bug discovered during the development of version 10.0.6. The managed authenticated encryptor computes its HMAC validation tag over incorrect payload bytes, then discards the computed hash. This flaw allows unauthenticated people to forge authentication payloads during the HMAC validation process, bypassing security checks that verify data integrity between clients and servers.<\/p>\n\n<p class=\"wp-block-paragraph\">Microsoft assigned a severity rating of 9.1 out of 10 to CVE-2026-40372. The company stated that attackers could forge credentials to authenticate as privileged users and gain full compromise of the underlying machine. Notably, even after patching, devices remain at risk if the forged credentials are not purged from the system.<\/p>\n\n<h2 class=\"wp-block-heading\">Post-Patch Remediation Required<\/h2>\n\n<p class=\"wp-block-paragraph\">Microsoft emphasized that updating to version 10.0.7 is only the first step in remediation. The company stated in its advisory: &#8220;If an attacker used forged payloads to authenticate as a privileged user during the vulnerable window, they may have induced the application to issue legitimately-signed tokens to themselves. Those tokens remain valid after upgrading to 10.0.7 unless the DataProtection key ring is rotated.&#8221;<\/p>\n\n<p class=\"wp-block-paragraph\">Affected users must rotate the DataProtection key ring if their applications served Internet-exposed endpoints while running a vulnerable version. Additionally, users should audit application-level long-lived artifacts created during the vulnerable period, as these items survive key rotation and must be rotated at the application layer.<\/p>\n\n<h2 class=\"wp-block-heading\">Which Systems Are Affected<\/h2>\n\n<p class=\"wp-block-paragraph\">The vulnerability primarily impacts macOS and Linux systems running ASP.NET Core applications. Windows devices are not affected because DataProtection on Windows uses encryptors that do not contain the bug. The majority of affected users ran version 10.0.6 that was loaded at runtime on non-Windows operating systems, particularly when applications either do not target Microsoft.NET.Sdk.Web or include a Microsoft.AspNetCore.App framework reference with the default PrunePackageReference setting enabled.<\/p>\n\n<p class=\"wp-block-paragraph\">A smaller group of users face vulnerability when their non-Windows applications or libraries used any vulnerable version of Microsoft.AspNetCore.DataProtection and the build consumed the net462 or netstandard2.0 target framework asset of the affected package.<\/p>\n\n<h2 class=\"wp-block-heading\">Recommended Action<\/h2>\n\n<p class=\"wp-block-paragraph\">Microsoft advised users to update the Microsoft.AspNetCore.DataProtection package to version 10.0.7 immediately. The <a href=\"\/category\/apps\/\">software update<\/a> addresses both the decryption regression and the underlying security vulnerability. Organizations using ASP.NET Core for web development should prioritize this patch deployment across their infrastructure, particularly for applications exposed to the internet or handling sensitive data.<\/p>\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>&#8220;If your application uses ASP.NET Core Data Protection, update the Microsoft.AspNetCore.DataProtection package to 10.0.7 as soon as possible to address the decryption regression and security vulnerability.&#8221;<\/p><cite>Microsoft Security Advisory<\/cite><\/blockquote>\n\n<p class=\"wp-block-paragraph\">ASP.NET Core is Microsoft&#8217;s open-source web development framework designed for writing .NET applications that run on Windows, macOS, Linux, and Docker containers. The framework emphasizes performance and stability, allowing runtime components, APIs, compilers, and languages to evolve while maintaining platform support for running applications. This vulnerability discovery underscores the importance of rapid security patching in <a href=\"\/category\/cybersecurity\/\">cybersecurity<\/a> management for organizations relying on modern development frameworks.<\/p>\n\n\n<p class=\"article-source-attribution wp-block-paragraph\"><em>Source: <a href=\"https:\/\/arstechnica.com\/security\/2026\/04\/microsoft-issues-emergency-update-for-macos-and-linux-asp-net-threat\/?utm_source=tldrinfosec\" target=\"_blank\" rel=\"nofollow noopener\">Ars Technica<\/a><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft released an emergency patch for a critical ASP.NET Core vulnerability affecting macOS and Linux systems. The flaw allows unauthenticated attackers to gain system privileges.<\/p>\n","protected":false},"author":13,"featured_media":78036,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_yoast_wpseo_meta-robots-noindex":"","_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_pr_autopilot_social_copy":"{\"x_hook\":\"Microsoft released an emergency patch for a critical ASP.NET Core vulnerability allowing unauthenticated attackers to gain system privileges on macOS and Linux devices. Version 10.0.7 addresses CVE-2026-40372 immediately.\",\"x_takeaways\":\"Key Highlights:\\n\ud83d\udd39 CVE-2026-40372 affects ASP.NET Core versions 10.0.0 through 10.0.6 with 9.1 severity rating\\n\ud83d\udd39 Faulty cryptographic signature verification allows privilege escalation on non-Windows systems\\n\ud83d\udd39 Users must update to 10.0.7 and rotate DataProtection key rings to fully remediate risk\"}","_yoast_wpseo_opengraph_title":"Microsoft Patches Critical ASP.NET Core Vulnerability","_yoast_wpseo_opengraph_description":"Microsoft issued an emergency security patch for ASP.NET Core addressing a critical vulnerability that allows unauthenticated attackers to gain SYSTEM privileges on macOS and Linux devices. Version 10.0.7 resolves the HMAC validation flaw.","_yoast_wpseo_opengraph_image":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/04\/asp-net-core-vulnerability-emergency-patch-security.webp","_yoast_wpseo_opengraph_image_id":78036,"_yoast_wpseo_twitter_title":"Microsoft Issues Emergency ASP.NET Core Security Patch","_yoast_wpseo_twitter_description":"Critical vulnerability CVE-2026-40372 in ASP.NET Core versions 10.0.0-10.0.6 allows privilege escalation on macOS and Linux. Update to 10.0.7 and rotate DataProtection keys immediately.","_yoast_wpseo_twitter_image":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/04\/asp-net-core-vulnerability-emergency-patch-security.webp","_yoast_wpseo_twitter_image_id":78036,"_yoast_wpseo_primary_category":439,"_extra_hide_author_box":"","_extra_featured_post":"","_partner_post_id":107585,"footnotes":""},"categories":[442,439],"tags":[3601,3356,1388,1705,3602],"class_list":["post-78037","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-apps","category-cybersecurity","tag-cve-2026-40372","tag-linux","tag-macos","tag-microsoft","tag-security-patch","et-has-post-format-content","et_post_format-et-post-format-standard"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>ASP.NET Core vulnerability Patch | Saudi Shopper<\/title>\n<meta name=\"description\" content=\"Microsoft releases emergency patch for ASP.NET Core vulnerability CVE-2026-40372 affecting macOS and Linux. SYSTEM privilege escalation risk detailed.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ASP.NET Core vulnerability Patch | Saudi Shopper\" \/>\n<meta property=\"og:description\" content=\"Microsoft releases emergency patch for ASP.NET Core vulnerability CVE-2026-40372 affecting macOS and Linux. SYSTEM privilege escalation risk detailed.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/\" \/>\n<meta property=\"og:site_name\" content=\"Saudishopper\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/SaudiShopper\" \/>\n<meta property=\"article:published_time\" content=\"2026-04-26T10:56:58+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-26T10:57:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/04\/asp-net-core-vulnerability-emergency-patch-security.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Nour Elotaiby\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ssict\" \/>\n<meta name=\"twitter:site\" content=\"@ssict\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Nour Elotaiby\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/microsoft-asp-net-core-vulnerability-emergency-patch\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/microsoft-asp-net-core-vulnerability-emergency-patch\\\/\"},\"author\":{\"name\":\"Nour Elotaiby\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#\\\/schema\\\/person\\\/e270afe93563c3ba9c14eea256a983d7\"},\"headline\":\"Microsoft Issues Emergency Patch for ASP.NET Core Vulnerability on macOS and Linux\",\"datePublished\":\"2026-04-26T10:56:58+00:00\",\"dateModified\":\"2026-04-26T10:57:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/microsoft-asp-net-core-vulnerability-emergency-patch\\\/\"},\"wordCount\":566,\"publisher\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/microsoft-asp-net-core-vulnerability-emergency-patch\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/asp-net-core-vulnerability-emergency-patch-security.webp\",\"keywords\":[\"CVE-2026-40372\",\"Linux\",\"macOS\",\"Microsoft\",\"security patch\"],\"articleSection\":[\"Apps &amp; Software\",\"Cybersecurity\"],\"inLanguage\":\"en-US\",\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/microsoft-asp-net-core-vulnerability-emergency-patch\\\/\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/microsoft-asp-net-core-vulnerability-emergency-patch\\\/\",\"name\":\"ASP.NET Core vulnerability Patch | Saudi Shopper\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/microsoft-asp-net-core-vulnerability-emergency-patch\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/microsoft-asp-net-core-vulnerability-emergency-patch\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/asp-net-core-vulnerability-emergency-patch-security.webp\",\"datePublished\":\"2026-04-26T10:56:58+00:00\",\"dateModified\":\"2026-04-26T10:57:00+00:00\",\"description\":\"Microsoft releases emergency patch for ASP.NET Core vulnerability CVE-2026-40372 affecting macOS and Linux. SYSTEM privilege escalation risk detailed.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/microsoft-asp-net-core-vulnerability-emergency-patch\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/microsoft-asp-net-core-vulnerability-emergency-patch\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/microsoft-asp-net-core-vulnerability-emergency-patch\\\/#primaryimage\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/asp-net-core-vulnerability-emergency-patch-security.webp\",\"contentUrl\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/asp-net-core-vulnerability-emergency-patch-security.webp\",\"width\":1200,\"height\":628,\"caption\":\"ASP.NET Core vulnerability security patch notification screen showing CVE-2026-40372 update prompt\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/microsoft-asp-net-core-vulnerability-emergency-patch\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Issues Emergency Patch for ASP.NET Core Vulnerability on macOS and Linux\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/\",\"name\":\"Saudishopper\",\"description\":\"Saudi ICT Shopper News\",\"publisher\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#organization\",\"name\":\"Saudi ICT News\",\"alternateName\":\"Saudi ICT Shopper News\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/SSTrans.png\",\"contentUrl\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/SSTrans.png\",\"width\":423,\"height\":165,\"caption\":\"Saudi ICT News\"},\"image\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/SaudiShopper\",\"https:\\\/\\\/x.com\\\/ssict\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#\\\/schema\\\/person\\\/e270afe93563c3ba9c14eea256a983d7\",\"name\":\"Nour Elotaiby\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e27a3f377f4ef014b4334305e358f12befadbb055d461166d37c62c672332d9d?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e27a3f377f4ef014b4334305e358f12befadbb055d461166d37c62c672332d9d?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e27a3f377f4ef014b4334305e358f12befadbb055d461166d37c62c672332d9d?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g\",\"caption\":\"Nour Elotaiby\"},\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/author\\\/nour\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ASP.NET Core vulnerability Patch | Saudi Shopper","description":"Microsoft releases emergency patch for ASP.NET Core vulnerability CVE-2026-40372 affecting macOS and Linux. SYSTEM privilege escalation risk detailed.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/","og_locale":"en_US","og_type":"article","og_title":"ASP.NET Core vulnerability Patch | Saudi Shopper","og_description":"Microsoft releases emergency patch for ASP.NET Core vulnerability CVE-2026-40372 affecting macOS and Linux. SYSTEM privilege escalation risk detailed.","og_url":"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/","og_site_name":"Saudishopper","article_publisher":"https:\/\/www.facebook.com\/SaudiShopper","article_published_time":"2026-04-26T10:56:58+00:00","article_modified_time":"2026-04-26T10:57:00+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/04\/asp-net-core-vulnerability-emergency-patch-security.webp","type":"image\/webp"}],"author":"Nour Elotaiby","twitter_card":"summary_large_image","twitter_creator":"@ssict","twitter_site":"@ssict","twitter_misc":{"Written by":"Nour Elotaiby","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/#article","isPartOf":{"@id":"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/"},"author":{"name":"Nour Elotaiby","@id":"https:\/\/saudishopper.com.sa\/en\/#\/schema\/person\/e270afe93563c3ba9c14eea256a983d7"},"headline":"Microsoft Issues Emergency Patch for ASP.NET Core Vulnerability on macOS and Linux","datePublished":"2026-04-26T10:56:58+00:00","dateModified":"2026-04-26T10:57:00+00:00","mainEntityOfPage":{"@id":"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/"},"wordCount":566,"publisher":{"@id":"https:\/\/saudishopper.com.sa\/en\/#organization"},"image":{"@id":"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/#primaryimage"},"thumbnailUrl":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/04\/asp-net-core-vulnerability-emergency-patch-security.webp","keywords":["CVE-2026-40372","Linux","macOS","Microsoft","security patch"],"articleSection":["Apps &amp; Software","Cybersecurity"],"inLanguage":"en-US","copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/saudishopper.com.sa\/en\/#organization"}},{"@type":"WebPage","@id":"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/","url":"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/","name":"ASP.NET Core vulnerability Patch | Saudi Shopper","isPartOf":{"@id":"https:\/\/saudishopper.com.sa\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/#primaryimage"},"image":{"@id":"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/#primaryimage"},"thumbnailUrl":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/04\/asp-net-core-vulnerability-emergency-patch-security.webp","datePublished":"2026-04-26T10:56:58+00:00","dateModified":"2026-04-26T10:57:00+00:00","description":"Microsoft releases emergency patch for ASP.NET Core vulnerability CVE-2026-40372 affecting macOS and Linux. SYSTEM privilege escalation risk detailed.","breadcrumb":{"@id":"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/#primaryimage","url":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/04\/asp-net-core-vulnerability-emergency-patch-security.webp","contentUrl":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/04\/asp-net-core-vulnerability-emergency-patch-security.webp","width":1200,"height":628,"caption":"ASP.NET Core vulnerability security patch notification screen showing CVE-2026-40372 update prompt"},{"@type":"BreadcrumbList","@id":"https:\/\/saudishopper.com.sa\/en\/microsoft-asp-net-core-vulnerability-emergency-patch\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/saudishopper.com.sa\/en\/"},{"@type":"ListItem","position":2,"name":"Microsoft Issues Emergency Patch for ASP.NET Core Vulnerability on macOS and Linux"}]},{"@type":"WebSite","@id":"https:\/\/saudishopper.com.sa\/en\/#website","url":"https:\/\/saudishopper.com.sa\/en\/","name":"Saudishopper","description":"Saudi ICT Shopper News","publisher":{"@id":"https:\/\/saudishopper.com.sa\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/saudishopper.com.sa\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/saudishopper.com.sa\/en\/#organization","name":"Saudi ICT News","alternateName":"Saudi ICT Shopper News","url":"https:\/\/saudishopper.com.sa\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/saudishopper.com.sa\/en\/#\/schema\/logo\/image\/","url":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2020\/08\/SSTrans.png","contentUrl":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2020\/08\/SSTrans.png","width":423,"height":165,"caption":"Saudi ICT News"},"image":{"@id":"https:\/\/saudishopper.com.sa\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/SaudiShopper","https:\/\/x.com\/ssict"]},{"@type":"Person","@id":"https:\/\/saudishopper.com.sa\/en\/#\/schema\/person\/e270afe93563c3ba9c14eea256a983d7","name":"Nour Elotaiby","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/e27a3f377f4ef014b4334305e358f12befadbb055d461166d37c62c672332d9d?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e27a3f377f4ef014b4334305e358f12befadbb055d461166d37c62c672332d9d?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e27a3f377f4ef014b4334305e358f12befadbb055d461166d37c62c672332d9d?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g","caption":"Nour Elotaiby"},"url":"https:\/\/saudishopper.com.sa\/en\/author\/nour\/"}]}},"_links":{"self":[{"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/posts\/78037","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/comments?post=78037"}],"version-history":[{"count":1,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/posts\/78037\/revisions"}],"predecessor-version":[{"id":78038,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/posts\/78037\/revisions\/78038"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/media\/78036"}],"wp:attachment":[{"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/media?parent=78037"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/categories?post=78037"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/tags?post=78037"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}