Microsoft Issues Emergency .NET Fixes for Brotli Flaw and Linux Privilege Escalation

Microsoft's out-of-band release of emergency .NET security updates underscores the danger of unpatched or incompletely patched vulnerabilities in widely deployed runtime components. The Brotli compression flaw (CVE-2026-111497) enables memory corruption that could cascade into privilege escalation, while the Linux-specific issue (CVE-2026-114148) exposes local attackers a direct path to elevated privileges. Critically, two of the addressed vulnerabilities were previously patched incompletely, demonstrating that patch quality verification is as important as patch speed. Organizations that lack processes for rapidly deploying out-of-band updates remain exposed during the window between disclosure and remediation.