> The most severe of the vulnerabilities could allow remote code execution if an attacker is able to log on to a target system and run a specially crafted appli

> The most severe of the vulnerabilities could allow remote code execution if an attacker is able to log on to a target system and run a specially crafted application. That reads to me like "RCE if you have RCE". Which I guess is a fair description of the DLL vulnerabilities if you ignore the privilege-escalation parts. The DirectShow and (perhaps) passwordless RDP vulnerabilities seem rather more severe to me. How is that leader quote appropriate?