Updated CVE to relect that this vulnerability is in the Windows Subsystem for Linux product. Microsoft recommends that customer using this product should install the latest version to be protected.

Updated an acknowledgement. This is an informational change only.

Updated an acknowledgement. This is an informational change only.

Updated an acknowledgement. This is an informational change only.

Updated an acknowledgement. This is an informational change only.

Updated an acknowledgement. This is an informational change only.

Updated an acknowledgement. This is an informational change only.

Microsoft is aware that the vulnerability for which this CVE was assigned has not been addressed. We are working to prepare and test a complete mitigation. We will update this document when there is more information.