whether it is a vuln is different argument (it's sandbox escape and definitely usable as part of an exploit)
whether it is a vuln is different argument (it's sandbox escape and definitely usable as part of an exploit)