Microsoft’s Emergency .NET Fixes: Brotli Buffer Overflow and Linux Tarball Ownership Vulnerabilities
Microsoft has released out-of-band security updates for .NET to address a critical Brotli decompression buffer overflow and unsafe ownership metadata in Linux .NET tarballs. Published October 25, 2026, the fixes cover .NET 8, .NET 9, .NET 10, and .NET 11 Release Candidate 3 and complete remediation for issues that were not fully resolved in the October 13 updates. Microsoft urges administrators and development teams to apply these updates as soon…