Microsoft ships emergency .NET fixes for a critical Brotli flaw
Microsoft deployed emergency updates on Sunday for .NET, Visual Studio and PowerShell addressing CVE-2026-111497, a buffer overflow flaw in Brotli, Google's widely used compression library. The vulnerability was reported by OpenAI's Codex Security team. Multiple other projects including Node.js and Python packages that depend on the Brotli library are also shipping fixes.
Key points
- Buffer overflow in Brotli compression library (CVE-2026-111497)
- Out-of-band updates released for .NET, Visual Studio, PowerShell
- Reported by OpenAI's Codex Security team
- Node.js, Python and other projects shipping fixes
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. The Next Web did the reporting; read the original for the full story.
Read the full story at The Next Web
