CyberReportedHighFeatured

Microsoft issues emergency .NET patches for critical Brotli flaw

Microsoft released out-of-band security updates for .NET to address a critical remote code execution vulnerability in the Brotli compression library, tracked as Broccoli2Shell/Node2Shell/HTTP2Shell. The flaw affects multiple .NET versions and could allow unauthenticated attackers to execute code on vulnerable servers. Organizations should prioritize patching given the criticality and potential for exploitation.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works

BleepingComputerabout 4 hours agoengCredibility 19%View source

Score Breakdown

Mosaic Score7.2

Model confidence0.9

Significance0.8

Source credibility0.2

Intelligence Tags

#microsoft #dotnet #brotli #vulnerability #patch #remote-code-execution

Source

Part of 2 situations

developingCyber3h ago

.NET, Node.js, PowerShell, Python Affected by Critical Brotli RCE Flaw

Microsoft has issued emergency out-of-band patches for a critical remote code execution (RCE) vulnerability in the Brotli compression library, affecting multiple .NET versions. This flaw, tracked as Broccoli2Shell/Node2Shell/HTTP2Shell, is confirmed to allow unauthenticated attackers to execute code on vulnerable servers. The vulnerability is also confirmed to impact Node.js, PowerShell, and Python ecosystems, indicating a broad supply-chain risk.

→ stable·↑2 signals·USScore 5.0

activePoliticsMarkets3m ago