Most recent entries from all

bdu:2026-05725

certfr-2026-avi-0478 — Une vulnérabilité a été découverte dans Microsoft .Net. Elle permet à un attaquant de provoquer une élévation de privil…

certfr-2026-avi-0478

EUVD-2026-376398

fkie_cve-2026-40372

Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

GHSA-9mv3-2cwr-p262 — Microsoft Security Advisory CVE-2026-40372 – ASP.NET Core Elevation of Privilege

Affected: NuGet: Microsoft.AspNetCore.DataProtection

## Executive Summary:

A bug in `Microsoft.AspNetCore.DataProtection` 10.0.0-10.0.6 NuGet packages can give an attacker the opportunity to execute an Elevation of Privilege attack by forging authentication cookies, and also allows some protected payloads to be decrypted.

If an attacker used forged payloads to authenticate as a privileged user during the vulnerable window, they may have induced the application to issue **legitimately-signed** tokens (session refresh, API key, password reset link, etc.) to themselves. Those tokens remain valid after upgrading to 10.0.7 unless the DataProtection key ring is rotated.

This is comparable in capability to [MS10-070](https://learn.microsoft.com/en-us/security-updates/SecurityBulletins/2010/ms10-070), which exploited a similar padding-oracle condition in ASP.NET's legacy encryption infrastructure.

## Announcement

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/395

## CVSS Details

- **Version:** 3.1 - **Severity:** Important - **Score:** 9.1 - **Vector:** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - **Weakness:** CWE-347: Improper Verification of Cryptographic Signature

## Affected Platforms

- **Platforms:** All - **Architectures:** All

## <a name="affected-packages"></a>Affected Packages The vulnerability affects some Microsoft .NET projects if they use any of affected package versions listed below

### <a name="ASP.NET Core 10"></a>ASP.NET Core 10 Package name | Affected version…

msrc_CVE-2026-40372 — ASP.NET Core Elevation of Privilege Vulnerability

msrc_CVE-2026-40372

NCSC-2026-0123 — Kwetsbaarheid verholpen in ASP.NET Core van Microsoft

NCSC-2026-0123

UBUNTU-CVE-2026-40372

Affected: Ubuntu:22.04:LTS: dotnet7, Ubuntu:24.04:LTS: dotnet10, Ubuntu:25.10: dotnet10, Ubuntu:26.04:LTS: dotnet10

Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

WID-SEC-W-2026-1213 — Microsoft ASP.NET: Schwachstelle ermöglicht Privilegieneskalation

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Microsoft ASP.NET ausnutzen, um seine Privilegien zu erhöhen.