Tech3 sources
Microsoft issues emergency .NET updates to fix critical Brotli CVE-2026-111497
Microsoft released out‑of‑band patches for .NET, Visual Studio and PowerShell to address CVE‑2026‑111497, a buffer overflow in Google’s Brotli compression library. The flaw, reported by OpenAI’s Codex Security team, is also being fixed in Node.js, Python packages and proxy tools. The updates were rolled out on Sunday as emergency security fixes.
Why it matters: Developers using .NET or related Microsoft tools must apply the patches immediately to prevent exploitation of the Brotli buffer overflow.
Read the coverage
BleepingComputerMicrosoft releases emergency .NET patches for critical Brotli flaw ↗bleepingcomputer.com · 14h ago
The RegisterMicrosoft releases emergency .NET security fixes for Google Brotli bug ↗theregister.com · 11h ago
The Next WebMicrosoft ships emergency .NET fixes for a critical Brotli flaw ↗thenextweb.com · 7h ago
More in Tech
TechModel release3h ago8 sources
Tech8h ago6 sources
Tech42m ago7 sources
Tech1h ago4 sources