cve 2023 27043

CVE-2023-27043 is a vulnerability in Python's email parsing code that affects Azure Linux (CBL-Mariner lineage). Microsoft's public advisory attests that Azure Linux includes the vulnerable code, but this attestation is product-scoped and does not guarantee that other Microsoft distributions or products are unaffected. The advisory uses machine-readable VEX/CSAF attestations to document the known affected status for Azure Linux images. Discussions on WindowsForum.com clarify the scope of Microsoft's advisory, emphasizing that the attestation covers only the Azure Linux family and that users should verify other products separately.