Smells like an unpatched critical vulnerability.