How to fix Critical/High/Medium vulnerabilities for OpenSSL for months now
We got notified of new Critical/High/Medium vulnerabilities for OpenSSL for months now, this time showing us hundreds of affected files ranging from AImeeting, MicosoftPaint, OneDrive, Nvidia, Cisco apps, Intel, the list goes on.
I'm beginning to question how Microsoft expects its customers to fix the hundreds, if not thousands, of libcrypto.ssl files that are present on PCs without totally disrupting daily user apps and just allowing this to be recorded in the Exposure Score section.
We created a ticket with Microsoft support and they kept rerouting our ticket. Has anyone been able to fix a solution to this issue?