Microsoft Ships Out-of-Band .NET Fixes for Critical Brotli Flaw CVE-2026-111497

Microsoft shipped out-of-band .NET fixes for CVE-2026-111497. Here is who is exposed, which versions are fixed, and why self-contained and NativeAOT apps must be rebuilt.









