As of 9/25/2026, Microsoft had reliable evidence of observed attacks against exploitation of this vulnerability.