> and the community should feel very lucky that such an obvious vulnerability was in the wild for so long without being exploited. We have no reason to assume

> and the community should feel very lucky that such an obvious vulnerability was in the wild for so long without being exploited. We have no reason to assume they haven't. The 0-day market is extremely lucrative, and they trade exploits rarely known to the wider community.