The company confirms this is a new vulnerability that is not related to the supply chain attack discovered in December 2020.