Apr 22, 2026
Emiliano Montesdeoca
Patch This Now: .NET 10.0.7 OOB Security Update for ASP.NET Core Data Protection
.NET 10.0.7 is an out-of-band release fixing a security vulnerability in Microsoft.AspNetCore.DataProtection — the managed authenticated encryptor was computing HMAC over the wrong bytes, leading to potential elevation of privilege. Update immediately.