I included a link to the tweet's source. AFAIK, this CVE's "Date Entry Created" is an interesting metadata artifact without any additional significance current

I included a link to the tweet's source. AFAIK, this CVE's "Date Entry Created" is an interesting metadata artifact without any additional significance currently (no futher background info publicly available at this time). I don't know if MITRE makes any additional info (such as "who") public, though I'm sure it is stored somewhere. I haven't had a chance to review the same value for other CVE's to determine how "normal" it is for the create date to be so long before when the CVE goes public, nor how things correlate for the associated Shadow Brokers fixes. -- https://twitter.com/thegrugq/status/853142591289802752 https://twitter.com/thegrugq/status/853142591289802752 > There are no acknowledgements for MS17-10 which patched most of the big bugs from the ShadowBrokers drop. https://www.renditioninfosec.com/2017/05/call-to-microsoft-to-release-information-about-ms17-010/ https://www.renditioninfosec.com/2017/05/call-to-microsoft-t... > Microsoft has not disclosed how it came to know about the vulnerabilities included in the MS17-010 patch. Microsoft also has not disclosed any information about “in the wild” exploitation of these vulnerabilities.