
Microsoft ships emergency .NET fixes for critical Brotli buffer overflow
CVE-2026-111497, scored 9.2, can disclose information, crash the process, or elevate privilege.
2 stories, newest first · one card per story

CVE-2026-111497, scored 9.2, can disclose information, crash the process, or elevate privilege.

TantoSec published a working exploit chaining a Telerik UI padding oracle to unauthenticated RCE; Progress patched the flaws in July.
Today 1.5K readers · 2.4K views · 756 reads · all time 189K views