Microsoft’s handling of CVE-2026-32631 highlights an important but often overlooked part of vulnerability management: the difference between a bug that exists in theory and one that is confirmed enough to justify immediate defensive attention. In this case, the advisory centers on GitHub-related...