I am also curious, but I do want to butt in to disagree with the point you're implying.
We've had red team exercises against our systems multiple times, and the victory always goes to someone who exploits not one thing in isolation, but a sequence of multiple they go around prodding for. It doesn't matter if this exploit goes 0 to 100%, as long as it works half way, I still want to hear of it.
Parts of the exploit chain that was laid out in the blog posts that claim an RCE were bugs that have previously been reported. Dealing with them in the past in the severity you outline would have possibly prevented the exploit chain.
However, it's specifically the ability to complete this to an RCE what makes or breaks the headlines here.
I am also curious, but I do want to butt in to disagree with the point you're implying.
We've had red team exercises against our systems multiple times, and the victory always goes to someone who exploits not one thing in isolation, but a sequence of multiple they go around prodding for. It doesn't matter if this exploit goes 0 to 100%, as long as it works half way, I still want to hear of it.
I think it's a relevant question here.
Parts of the exploit chain that was laid out in the blog posts that claim an RCE were bugs that have previously been reported. Dealing with them in the past in the severity you outline would have possibly prevented the exploit chain.
However, it's specifically the ability to complete this to an RCE what makes or breaks the headlines here.