Microsoft’s brief product-mapping for CVE-2025-3416 — that “Azure Linux includes this open‑source library and is therefore potentially affected” — is accurate for the product it names, but it is not a technical guarantee that no other Microsoft product or image could contain the same vulnerable...
