Microsoft Ships Emergency ASP.NET Core Fix for CVE-2026-40372 Affecting Linux and macOS Deployments Published: April 22, 2026 04:10 PM CDT (America/Chicago) Microsoft has released an emergency security update for ASP.NET Core to address CVE-2026-40372 , a high-severity vulnerability affecting the Mi... ASP.NET Core CVE-2026-40372 DevSecOps Microsoft Vulnerability Management Apr 22, 2026