The flaws allow remote, unauthenticated attackers to make system changes, access underlying accounts, and inject commands.
On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that ...