The Brotli Bug Is Being Exploited (CVE-2026-111497): Home User Checklist for Chrome, Discord, VS Code and More

[husham]

CISA says the Brotli decompression flaw CVE-2026-111497 is being exploited. It hides inside browsers, Electron apps like Discord and VS Code, Node.js, PowerShell 7, Git for Windows, Python and Linux. Here is how to check and update each one on Windows, macOS, Linux and Android, with the fixed versions.
[...]

Continue reading...