This isn’t a virus.
Correction, not a virus, agreed. Its a security flaw. In other words it doesn’t have to propagate to other machines, the hole is already in place and ready to go.