Microsoft ships emergency .NET fixes for critical Brotli flaw
Microsoft released out-of-band updates for .NET, Visual Studio and PowerShell on Sunday to fix a critical buffer overflow (CVE-2026-111497) in Brotli, Google's widely used compression library. The flaw was reported by OpenAI's Codex Security team. Node.js, Python packages and proxies that bundle the library are also shipping fixes.
