Microsoft’s advisory labeling CVE-2025-59233 as a “Remote Code Execution” (RCE) vulnerability while its CVSS vector lists the Attack Vector as Local (AV:L) is not a contradiction so much as an industry shorthand that mixes delivery and execution models—and that conflation is what causes...
