BleepingComputer · Bill Toulas ·
Microsoft and others push out emergency patches for a critical flaw in Brotli, the C decoder library built into Node.js, that could allow remote code execution
A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.
Lead Source
How this story grew
Coverage · 0
Discussion · 0
Oct 26Oct 28
More
Microsoft: Microsoft
Node.js: Node.js
CyberScoop: CyberScoop
iTnews: iTnews
Cyber Daily: Cyber Daily
Wiz Blog: Wiz Blog
The Register: The Register
Microsoft Tech Community: Microsoft Tech Community
Visual Studio Magazine: Visual Studio Magazine
heise online News: heise online News
Forbes: Forbes
Discussion
Related stories
BleepingComputer: Google patches an actively exploited zero-day flaw in Chrome that could potentially allow remote code execution within Chrome's sandboxed renderer process
Cyber Security News: Microsoft patches a severe flaw in its Android Authenticator app that could let untrusted apps impersonate Microsoft apps and obtain delegated account tokens