1 of 1
Story summary
- Microsoft released emergency out-of-band updates for .NET, Visual Studio and PowerShell to fix CVE-2026-111497.
- OpenAI Codex Security reported a Brotli buffer overflow on October 22 that could let unauthenticated attackers read or corrupt memory.
- Microsoft warned the flaw could cause information disclosure, denial-of-service or privilege escalation and rated exploitation “more likely”.
- Wiz said 91% of cloud environments have vulnerable resources, with 82% exposing Node.js instances.