Microsoft Issues Emergency .NET Fixes for Brotli Flaw and Linux Privilege Escalation
Microsoft has released emergency security updates for .NET 8, .NET 9, .NET 10 and .NET 11 Release Candidate 3 (RC3), fixing a buffer overflow flaw and a Linux vulnerability that could let local attackers gain higher privileges. The company has urged developers and administrators to install the updates as soon as possible.
The October 25 out-of-band release also revisits two vulnerabilities that Microsoft’s October 13 security updates did not fully fix. The latest release addresses both issues again, alongside the newly disclosed flaws. Hackread.com previously reported on Microsoft’s October Patch Tuesday, when the company released fixes for a record 1,413 vulnerabilities.
What the Vulnerabilities Could Allow
The most serious issue, CVE-2026-111497, affects Brotli- a compression technology used to reduce the size of data transferred or processed by applications. A flaw in how .NET handles this datacould let an attacker read or corrupt a program’s memory without first logging...
Copyright of this story solely belongs to hackread.com. To see the full text click HERE
