Two of the four CVSS 10.0 flaws enable remote code execution.

A statement by post title. Statements are as reported by the cited publishers — not verified by DecisionGateway.

Including Two Enabling Remote Code Execution