There's a difference between walking on the woods at night blind, and with a 20K lumens torchlight.
A successful universal exploit is all about making it land on the correct memory address for each set up, and that is nigh impossible.
As was stated by many groups that do this for a living (E.g., Crowdstrike) "PoC yes, RCE no"
Every single group I read published with the same caveats "RCE _in our labs_" as in, they knew a lot regarding the configuration of the system. Wiz themselves had an article out last week that stated "AI written, tread carefully" and almost all of them made no effort on distinguishing how the 2 vulns operated (Or, differed)
There's a difference between walking on the woods at night blind, and with a 20K lumens torchlight.
A successful universal exploit is all about making it land on the correct memory address for each set up, and that is nigh impossible.
As was stated by many groups that do this for a living (E.g., Crowdstrike) "PoC yes, RCE no"
Every single group I read published with the same caveats "RCE _in our labs_" as in, they knew a lot regarding the configuration of the system. Wiz themselves had an article out last week that stated "AI written, tread carefully" and almost all of them made no effort on distinguishing how the 2 vulns operated (Or, differed)