.NET 8.0.33, 9.0.22 and 10.0.14 Fix the Brotli Flaw CVE-2026-111497 Out of Band: Update the Runtime and Rebuild Self-Contained Apps Microsoft shipped .NET out-of-band security updates on October 25 for a Brotli buffer overflow. See who is exposed, how to check, and why self-contained apps need a rebuild. Oct 29, 2026 4 min read Microsoft
