Taking a step towards greater transparency, MSRC will now begin issuing CVEs for critical cloud service vulnerabilities, regardless of whether customers need to take action to protect themselves.
In our ongoing commitment to transparency, we will now issue CVEs for critical cloud service vulnerabilities, regardless of whether customers need to install a patch or take other actions to protect themselves. Learn more in our blog post: https://msft.it/6044YCjBG