Microsoft ships emergency .NET fixes for a critical Brotli flaw

T2High 40Covered by 1 source · first reported by TNW at 26 Oct, 22:08 UTC

Microsoft shipped out-of-band updates for .NET, Visual Studio and PowerShell on Sunday. They fix CVE-2026-111497, a buffer overflow in Brotli, Google’s widely used compression library, which OpenAI’s Codex Security team reported. Node.js, Python packages, proxies and other tools that bundle the…