{"revision":"5a4e178872064356a9919eed533a21db","evidence":{"cve":"CVE-2026-111497","kev":{"cve":"CVE-2026-111497","product":"Brotli","name":"Google Brotli Unchecked Return Value Vulnerability","dateAdded":"2026-10-27","dueDate":"2026-11-10","knownRansomwareUse":false,"shortDescription":"Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.","vendor":"Google","isMicrosoft":false,"products":[],"advisoryUrl":"https://github.com/google/brotli/releases/tag/v1.2.1","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111497","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-111497"},"epss":null,"observedAt":"2026-10-27T20:48:09.9692362+00:00","kevRetained":false,"reviewIdentity":"7cd4bcd2fe514d65ad89fdec"}}