Security advisories for Windows, Windows Server and Microsoft products. Review affected versions, Patch Tuesday updates and mitigation guidance.
Microsoft disclosed CVE-2026-111497, an out-of-bounds write in the Brotli decoder used by .NET that could enable elevation of privilege over a network. Exposure requires an application to use Brotli decompression; check affected products and versions, then install the applicable update.
CISA confirms CVE-2026-124194 in Microsoft Office Outlook is being exploited in the wild. The vulnerability may enable network spoofing. Apply Microsoft's mitigation guidance and note the CISA deadline of 2026-11-24.
Copyright © 2026 ViSafe (visafe.net) · A blog sharing cybersecurity knowledge
