Taggart :donor:<p><span>One thing I haven't seen stated explicitly about </span><a href="https://infosec.town/tags/CVE_2024_3094" rel="nofollow noopener noreferrer" target="_blank">#CVE_2024_3094</a><span>: The engineer who found this is a Microsoft employee. Does that mean Microsoft runs the vulnerable configuration? Given that it isn't that common, could we reasonably deduce that Microsoft was a target?</span></p>