For comparison, in the native world program is considered vulnerable when someone finds arbitrary write primitive (even without leak), use after free, and even

For comparison, in the native world program is considered vulnerable when someone finds arbitrary write primitive (even without leak), use after free, and even double free. There is a huge gap between these and actually having a working RCE exploit. Most CVEs in this space are given without a working exploit ever written.