What’s Vulnerable › Products

Google Brotli vulnerabilities

2 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Google Brotli version is affected

Exploited Google Brotli vulnerabilities

• CVE-2026-111497 — Out-of-Bounds Write in Google Brotli Decoder

Latest Google Brotli vulnerabilities

• CVE-2026-111497 — Out-of-Bounds Write in Google Brotli Decoder (CVSS 9.8) — exploited
• CVE-2020-8927 — Buffer overflow in Brotli library (CVSS 6.5)