Microsoft’s CVE-2026-27922 entry for the Windows Ancillary Function Driver for WinSock is a good example of how MSRC uses its confidence language to signal both urgency and uncertainty: the issue is serious because it sits in a privileged kernel driver, but the public record still appears to be...