[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcOpWnNS0AINcYEFDnenuiRWTD2aMIi2CI7GX-YGq0LU":3},{"article":4,"iocs":54,"watch_terms":68,"solutions":69,"lesson":168},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"b73eb53d-9f48-4d5c-9177-8e1c07d7ef9f","Microsoft Issues Emergency .NET Fixes for Brotli Flaw and Linux Privilege Escalation","microsoft-issues-emergency-net-fixes-for-brotli-flaw-and-linux-privilege-escalat-305ec2","Microsoft releases emergency .NET updates to fix a Brotli memory flaw and Linux privilege escalation, while correcting two incomplete October security patches.","Microsoft has issued out-of-band security updates for multiple .NET versions to address a critical Brotli compression flaw (CVE-2026-111497) that could lead to memory corruption and potential privilege escalation. Additionally, a Linux-specific vulnerability (CVE-2026-114148) allows local attackers to gain elevated privileges. The release also corrects two previously incompletely patched vulnerabilities.","Microsoft releases emergency .NET updates for Brotli flaw and Linux privilege escalation.","https:\u002F\u002Fhackread.com\u002Fmicrosoft-issues-net-fixes-brotli-linux-privilege-escalation\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002Fmicrosoft-issues-net-fixes-brotli-linux-privilege-escalation.jpg","2026-10-27T15:46:10+00:00","2026-10-27T16:00:11.145619+00:00",8,[17,20,22,24,26,29],{"name":18,"type":19},".NET 8","product",{"name":21,"type":19},".NET 9",{"name":23,"type":19},".NET 10",{"name":25,"type":19},".NET 11 RC3",{"name":27,"type":28},"Brotli","technology",{"name":30,"type":19},"ASP.NET Core","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42,44,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55,59,62,65],{"type":56,"value":57,"context":58},"cve","CVE-2026-111497","Brotli memory corruption vulnerability in .NET",{"type":56,"value":60,"context":61},"CVE-2026-114148","Linux .NET privilege escalation vulnerability",{"type":56,"value":63,"context":64},"CVE-2026-70197","Memory corruption flaw involving SocketAsyncEventArgs",{"type":56,"value":66,"context":67},"CVE-2026-102870","Blazor WebAssembly debugger vulnerability",[18,21,23],{"controls":70,"vendors":158},[71,100,129],{"slug":72,"name":73,"problem":74,"products":75},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[76,84,92],{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":101,"name":102,"problem":103,"products":104},"patch-management","Automated patch management","Known holes get closed in days, not months.",[105,113,121],{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":130,"name":131,"problem":132,"products":133},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[134,142,150],{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":143,"vendor_name":144,"vendor_logo":145,"product_slug":146,"product_name":147,"url":148,"description":149},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"vendor_slug":151,"vendor_name":152,"vendor_logo":153,"product_slug":154,"product_name":155,"url":156,"description":157},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",[159,165],{"slug":160,"name":161,"logo_path":162,"roles":163},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png",[164],"affected",{"slug":85,"name":86,"logo_path":87,"roles":166},[167],"reported_by",{"slug":169,"title":170,"body":171,"framework_refs":172,"framework_notes":180},"microsoft-emergency-net-patches-highlight-critical-flaw-remediation-urgency","Microsoft Emergency .NET Patches Highlight Critical Flaw Remediation Urgency","Microsoft's out-of-band release of emergency .NET security updates underscores the danger of unpatched or incompletely patched vulnerabilities in widely deployed runtime components. The Brotli compression flaw (CVE-2026-111497) enables memory corruption that could cascade into privilege escalation, while the Linux-specific issue (CVE-2026-114148) exposes local attackers a direct path to elevated privileges. Critically, two of the addressed vulnerabilities were previously patched incompletely, demonstrating that patch quality verification is as important as patch speed. Organizations that lack processes for rapidly deploying out-of-band updates remain exposed during the window between disclosure and remediation.",[173,174,175,176,177,178,179],"CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","OWASP A06:2021 Vulnerable and Outdated Components","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","NIS2 Article 21(2)(b)","PCI DSS Requirement 6",{"NIS2 Article 21(2)(b)":181,"PCI DSS Requirement 6":182,"NIST SP 800-53 SI-2: Flaw Remediation":183,"OWASP A06:2021 Vulnerable and Outdated Components":184,"CIS Control 7: Continuous Vulnerability Management":185,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":186,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":187},"NIS2 requires entities to have incident handling and vulnerability management processes in place; the existence of incompletely patched vulnerabilities indicates a gap in post-patch verification that NIS2 compliance would demand.","PCI DSS Requirement 6 mandates that organizations develop and maintain secure systems by applying security patches promptly, which would have ensured the critical .NET Brotli flaw was prioritized and remediated without delay.","SI-2 requires organizations to identify, report, and correct information system flaws promptly, directly mandating the kind of emergency patch process needed to address out-of-band Microsoft updates.","The unpatched and incompletely patched .NET runtime components represent exactly the vulnerable third-party dependencies OWASP A06 warns against, highlighting the need for component tracking and rapid updates.","Continuous vulnerability scanning would have immediately flagged unpatched and incompletely patched .NET versions, giving teams actionable remediation targets before attackers could exploit the flaws.","This control requires timely identification and remediation of technical vulnerabilities, which would have driven rapid deployment of the .NET patches and verification that prior incomplete fixes were fully effective.","The Linux privilege escalation vulnerability exploits weaknesses in access control; enforcing least-privilege principles for local users would have reduced the blast radius even if the flaw remained unpatched."]