Microsoft embraces common weakness enumeration standard for vulnerability disclosure

The policy change is part of the company's wider effort to improve security practices and become more transparent following years of scrutiny. 

change disclosure enumeration microsoft policy practices security standard the company vulnerability vulnerability disclosure weakness