@joeo10 It looked like that one was going to be fairly limited in scope, too, given that it's only vulnerable on Windows with specific - mostly east Asian - languages in use.
There's a lot more public-facing Windows machines running PHP in China than we thought, eh?