Mostly, yes exploits in the wild have been detected in HTTP requests, and as the researcher assumes this exploit could have existed for a very long time.

And it's not a local privilege escalation only as the write up assumes, it was exploited remotely!