Comment by kenhwang

> merely an unexploited vulnerability

The footnote there is, unexploited in the last 2 weeks they had logs for. They have no way of knowing if it was exploited earlier than that.