Microsoft security advisory (AV26-377)

Serial number: AV26-377
Date: April 22, 2026

On April 21, 2026, Microsoft published an out-of-band (OOB) security update to address a critical vulnerability in the following product:

• .NET 10.0.0 – versions 10.0.0 to 10.0.6

The Cyber Centre encourages users and administrators to review the web links provided and apply the necessary update.

• .NET 10.0.7 Out-of-Band Security Update
• ASP.NET Core Elevation of Privilege Vulnerability - CVE-2026-40372