CVE-2025-41244—that was already under exploitation by a China-linked hacking group, but failed to disclose that fact in its public advisory.The flaw allows a non-administrative user in a virtual ...