4 ms·

I think it is valid to take exploitability into the equation.

• ryanlol 9y ago
  And the impact remains minuscule outside of the remote desktop scenario. The attacker must already have access to exploit this, and one would have to be utterly clueless to expect that an attacker wouldn't be able to get root some other way.