CVE-2026-111497: Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder

Affected

Manufacturer

Microsoft

Products

.NET 8.0 installed on Windows .NET 8.0 installed on Linux .NET 8.0 installed on Mac OS .NET 9.0 installed on Windows .NET 9.0 installed on Linux .NET 9.0 installed on Mac OS .NET 10.0 installed on Windows .NET 10.0 installed on Linux .NET 10.0 installed on Mac OS .NET 11.0 installed on Windows .NET 11.0 installed on Linux .NET 11.0 installed on Mac OS Microsoft Visual Studio 2019 version 16.11 Microsoft Visual Studio 2022 version 17.14 Microsoft Visual Studio 2026 version 18.11 Microsoft Visual Studio 2026 version 18.12 PowerShell 7.6 PowerShell 7.5 PowerShell 7.4

CPE

cpe:2.3:a:microsoft:.net_8.0_installed_on_windows:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_8.0_installed_on_linux:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_8.0_installed_on_mac_os:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_9.0_installed_on_windows:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_9.0_installed_on_linux:*:*:*:*:*:*:*:*

Whether your exact unit is affected depends on the model, serial number and region in the official notice.

What the official notice says

Risk: Critical — Elevation of Privilege

Remedy / actions:

• Install the security update: https://support.microsoft.com/help/5133964

Sources

• Microsoft Security Update Guide (MSRC) Tier A · official published 2026-10-13

Evidence ledger

Every piece of evidence we store is appended to a public hash chain, so later edits are detectable. Anyone can re-verify it.

Chain head: #1697 83c542f07eed…822c88

Raw ledger entries (JSON) · Verify chain