Their wording is actually quite deliberate. They say there isn’t one being exploited, but they do not explicitly say that there isn’t a RCE vulnerability.
It stinks of lawyers checking the press release. They can’t say “there is none” in the offchance that someone, sometime finds one. Then clients could point to this press release saying “SEE, YOU TOLD US THERE WAS NONE AND 25 YEARS LATER WE FOUND ONE”. I bet they are telling the truth, just ran through a lawyer and PR team.
If they say it’s not a RCE vulnerability, it could still be a privilege escalation vulnerability etc. They avoided saying their software isn’t being exploited or “we have seen no evidence our software has been compromised”, or “there is no clear signs…”.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]
Video game news oriented community. No NanoUFO is not a bot :)
Posts.
News oriented content (general reviews, previews or retrospectives allowed).
Broad discussion posts (preferably not only about a specific game).
No humor/memes etc…
No affiliate links
No advertising.
No clickbait, editorialized, sensational titles. State the game in question in the title. No all caps.
No self promotion.
No duplicate posts, newer post will be deleted unless there is more discussion in one of the posts.
No politics.
Comments.
No personal attacks.
Obey instance rules.
No low effort comments(one or two words, emoji etc…)
Please use spoiler tags for spoilers.
My goal is just to have a community where people can go and see what new game news is out for the day and comment on it.
So if it isn’t a RCE vulnerability, what vulnerability is it?
Their wording is actually quite deliberate. They say there isn’t one being exploited, but they do not explicitly say that there isn’t a RCE vulnerability.
It kinda stinks of ass coverage.
“I did not have sexual relations with that woman”
It stinks of lawyers checking the press release. They can’t say “there is none” in the offchance that someone, sometime finds one. Then clients could point to this press release saying “SEE, YOU TOLD US THERE WAS NONE AND 25 YEARS LATER WE FOUND ONE”. I bet they are telling the truth, just ran through a lawyer and PR team.
Yeah, it stood out to me.
It’s always in what they don’t say.
If they say it’s not a RCE vulnerability, it could still be a privilege escalation vulnerability etc. They avoided saying their software isn’t being exploited or “we have seen no evidence our software has been compromised”, or “there is no clear signs…”.
Which gives a little wriggle room.