without the exploit in hand few would believe the vuln was actionable if only because it hadn’t been used before.