Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder
CVE-2026-111497
Summary
Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Products covered
ASP.NET Core 10.0
Microsoft Visual Studio 2026 version 18.5
Remediation
Release Notes Install KB5091596.
Vendor-listed fixes
10.0.7
18.5.2
CVEs in this advisory 1
Updates
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Updated by Microsoft Security Response Center
The vendor changed the advisory after it was first published.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.