Critical Brotli vulnerability exposes applications to remote code execution (CVE-2026-111497)
– A critical vulnerability in Google’s Brotli compression library could allow attackers to corrupt memory, crash applications, disclose sensitive information and potentially execute arbitrary code. Security researchers have also reported proof-of-concept exploits, while the flaw has been added to the US Cybersecurity and Infrastructure Security Agency’s Known Exploited Vulnerabilities (KEV) catalogue.
Read More