It is trivial only if the vulnerability is exploitable. I've seen many vulnerabilities that were not exploitable or innocuous even if exploitable.
Michael Martin Murphey - Geronimo's Cadillac