Microsoft isn’t just not issuing a CVE, they’re actually not going to disclose this issue at all.
Microsoft now confirmed that because the vulnerability I reported is important, not critical, and because they’ve now fixed it they won’t issue a CVE. It’s like they actually want to discourage people from reporting.
