Microsoft has released an out of band update fixing CVE 2026 40372 in ASP.NET Core, a critical privilege escalation flaw affecting DataProtection cryptography that could allow SYSTEM level access under specific conditions.
GPUBreach, a new RowHammer attack targeting GDDR6 GPUs, enables arbitrary GPU memory access and full CPU privilege escalation, posing risks for cloud AI and multi-tenant deployments.