A researcher, Microsoft, public proof-of-concept code, and claims of quick attacker attention all arrive here as a disclosure-process knot rather than a tidy exploit timeline. Worth reading for the boundary problem between vulnerability handling and public pressure, with the caveat that this retained packet does not identify the six bugs or prove the attacker-use claims.