The tragedy of the #CVE tracking system:
Usually it’s clogged with low-quality spam (costly regex? Critical DoS! integer overflow? anything could happen!)
This time there’s a real 0day exploited vulnerability, in almost everything that has pixels, and nobody’s getting notified, because the report buried the impact.