🔴 Critical: Microsoft releases emergency .NET patches for critical Brotli flaw
-
Microsoft has pushed out emergency security updates for .NET to address a critical vulnerability that has been given the name Broccoli2Shell, and is also tracked as Node2Shell and HTTP2Shell.
The flaw is rated critical and affects the Brotli decompression component within .NET. Microsoft is treating this seriously enough to release the patches outside of its normal update schedule, so administrators running affected .NET deployments should prioritize testing and deployment.
At this time, the details available are limited to what Microsoft has published in its emergency advisory. The company has not disclosed the full technical specifics of the vulnerability, and no specific CVE identifier has been provided in the source reporting. That means defenders should rely on Microsoft's official guidance and patch information rather than assuming a particular CVE number.
Given the critical rating and the emergency nature of the release, the practical takeaway is straightforward:
- Identify any systems, services, or applications that depend on .NET and the Brotli decompression path.
- Apply the emergency .NET updates as soon as possible.
- Monitor Microsoft's advisory channels for further technical details and any updates to the tracking information.
Because the disclosure is still developing, expect additional details to emerge in the coming days.
Source: Unknown
Are any of your environments running .NET services that could be exposed to this Brotli flaw, and how are you handling the emergency patching window?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login