CVE-2026-111497
CRITICAL CISACVSS Score
N/A
Severity
CRITICAL
Source
CISA
Published
Oct 27, 2026
Description
Google โ Brotli: Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.