How is this a serious zero day if it requires local code execution to run?