&gt; The most severe of the vulnerabilities could allow remote code execution if an attacker is able to log on to a target system and run a specially crafted application.<p>That reads to me like &quot;RCE if you have RCE&quot;.  Which I guess is a fair description of the DLL vulnerabilities if you ignore the privilege-escalation parts.<p>The DirectShow and (perhaps) passwordless RDP vulnerabilities seem rather more severe to me.<p>How is that leader quote appropriate?