Microsoft issued an emergency .NET patch for a critical Brotli flaw called Node2Shell, scored 9.2 CVSS severity.

Microsoft releases urgent .NET security updates for Brotli and Linux flaws, fixes earlier patch issues, and urges developers ...

Microsoft’s updates address two newly disclosed vulnerabilities in the .NET developer platform, as well as flaws not fully ...

Microsoft has released an emergency patch for a critical Brotli decompression flaw affecting multiple .NET versions, warning ...

Microsoft has released a series of emergency updates for .NET to address a serious buffer overflow vulnerability in the Brotli decoder. The fixes address the ...

Node.js says the Brotli decoder ‘kept appending input bytes to an eight-byte internal buffer’. Microsoft has now patched .NET ...

Microsoft and the PHP project have released fixes for the Google Brotli decoder flaw, CVE-2026-111497, after Node.js patched ...

Microsoft has issued an urgent security update for .NET due to a critical vulnerability in Google's Brotli decompression ...

The unscheduled updates address Brotli-related memory corruption and Linux tarball ownership issues, while completing fixes from the earlier October release.

Microsoft released its monthly security updates on October 13 (October 14 JST). There were 1,417 CVEs assigned by Microsoft, ...

Microsoft has expanded its .NET bug bounty program and increased rewards to $40,000 for some .NET and ASP.NET Core vulnerabilities. Madeline Eckert, a senior program manager for Researcher Incentives ...