CVE-2021-26427 and the NSA

To Whom It May Concern:

Pursuant to the Freedom of Information Act, I hereby request the following records:

All documents (such as but not limited to: memo's, e-mails, damage assessments, findings and reporting of the CVE-2021-26427 within the NSA Cybersecurity Collaboration Center) related in whole and/or in part to the detailing of the disclosure of CVE-2021-26427 including all inter-agency communication like local, state or federal agencies and the subsequent disclosure to the public and to Microsoft.

I'd also request all proof of concept code, any binary diffing databases and/or ida pro, windbg or ghidra databases to be made public.

This was publicly released on NSA's twitter account: https://twitter.com/NSACyber/status/1447971244935110656

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 20 business days, as the statute requires.

Sincerely,

Jurre van Bergen