Comment

Comment by reflexe

Sorry but this post makes zero sense.

Many apps (eg chrome) frequently fix bugs that are actively exploited in the wild yet have no public weaponized chain (sometimes for months).

The fact that there is no fully public weaponized chain does not mean it does not exist or that this bug is not as scary. It only means that it is not as trivial to exploit as log4shell/shellshock/etc.

According to cloudflare [1], it is being exploited in the wild.

[1] https://x.com/eastdakota/status/2113079352682570051

parent reflexe 10 days ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton