Microsoft has patched CVE-2025-55315, a critical vulnerability in the ASP.NET Core open source web development framework.
Microsoft's timing is awkward, as it continues to encourage Windows 10 users to upgrade now that official support has ended.