Two recent weird/wild cases related to MSRC. 😐 1. One bug was processed for 5 months, reported on April 2nd, got the only update in early Sep, that's a "low severity" decision (means no CVE no bulletin etc), but at the same time I was told they're going to patch that "low severity" bug on Sep. Patch Tuesday (should already patched now). I'll probably do a write-up because if I don't say the bug doesn't even exist. 2. Another bug, which in technical, is actually the same bug I reported last year. Last year they acknowledged the bug and issued the patch (October, CVE-2025-59221). In May I found the bug somehow was still there - a failed patch, not sure what happened - hard to trace all the Office stuff! Anyway, I reported it to them again. Wild enough, I just learned that this time they've closed the case, the reason is that they couldn't reproduce the bug.. for a bug supposes to have been patched.. And nobody bother to ask me back for help but close that straightly?
Post summary
The article centers on Microsoft’s patching schedule for a low‑severity bug and a second bug that was ultimately closed after failed reproduction, highlighting patch details and possible debunking.