Microsoft rated this bug as low exploitability. Miscreants weaponized it in just 8 days