MICROSOFT RELEASES EMERGENCY .NET SECURITY FIXES FOR GOOGLE BROTLI BUG

Summary from the TLDR InfoSec newsletter

Microsoft shipped out-of-band fixes for .NET 8 through 11 to address Broccoli2Shell (CVE-2026-111497), a Brotli buffer overflow rated "Exploitation More Likely" that also affected Node.js, Python, Bun, Envoy, Istio, and FFmpeg through crafted JPEG XL images.