logo
About Contact

Microsoft and PHP Race to Address Critical Brotli Security Flaws Amid Alarmed Response

Technology News

Microsoft and PHP Race to Address Critical Brotli Security Flaws Amid Alarmed Response

Experts temper emergency-level alarms over critical Brotli defect

CyberScoop

Experts temper emergency-level alarms over critical Brotli defect

The defect in a widely distributed open-source library provoked an emergency response, yet exploitation hasn’t been observed in the wild.

Microsoft releases emergency .NET update to fix critical Brotli security flaw

Firstpost

Microsoft releases emergency .NET update to fix critical Brotli security flaw

Microsoft has released an emergency patch for a critical Brotli decompression flaw affecting multiple .NET versions, warning of potential memory corruption, information disclosure and privilege...

Microsoft ships emergency .NET fixes for a critical Brotli flaw

TNW

Microsoft ships emergency .NET fixes for a critical Brotli flaw

Microsoft shipped out-of-band updates for .NET, Visual Studio and PowerShell on Sunday. They fix CVE-2026-111497, a buffer overflow in Brotli, Google’s widely used compression library, which...

Microsoft releases emergency .NET security fixes for Google Brotli bug

The Register

Microsoft releases emergency .NET security fixes for Google Brotli bug

Redmond joins growing list of software maintainers scrambling to patch compression flaw

Microsoft issues urgent .NET security patches for critical buffer overflow flaws

Neowin

Microsoft issues urgent .NET security patches for critical buffer overflow flaws

Microsoft has released out-of-band security updates for .NET 8, 10, and 11, alongside .NET 11 Release Candidate 3, fixing critical buffer overflow and tarball ownership vulnerabilities.

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

The Hacker News

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker...

Coverage dates

First reported:

First saved on ClustZ:

Coverage updated:

We use cookies to improve your experience and analyze site traffic. By clicking "Accept", you agree to our use of cookies. See our Privacy Policy.