Security News Microsoft issues urgent .NET security patches for critical buffer overflow flaws

[AFEH]

Content source

https://www.neowin.net/news/microsoft-issues-urgent-net-security-patches-for-critical-buffer-overflow-flaws/

Microsoft has released out-of-band (OOB) security updates for .NET 8, .NET 9, and .NET 10.
It has also published .NET 11 Release Candidate 3.
The company has recommended updating your installation as soon as possible because it fixes two quite serious vulnerabilities: CVE-2026-111497 and CVE-2026-114148.

CVE-2026-111497 is a buffer overflow vulnerability that exists in .NET’s use of the Brotli decompression algorithm.
The vulnerability could allow an unauthenticated attacker to read or corrupt process memory, leading to information disclosure, denial of service, or elevation of privilege. It affects all platforms.

https://www.neowin.net/news/microsoft-issues-urgent-net-security-patches-for-critical-buffer-overflow-flaws/