Disclosures

Each disclosure documents the affected systems, demonstrated impact, remediation status, and coordination timeline.

Findings are shared privately with vendors first. Publication may follow a fix or a communicated disclosure deadline, including when a vendor does not engage. The disclosure approach explains how those decisions are made. Where a vendor names a fixed build, that is recorded as the vendor’s statement. I do not claim an issue is fixed unless I have tested the build myself and said so.

Reproduction code and packet captures are withheld for anything still affecting a product line with no named fix and no end of support statement. Each disclosure says what releases them.