: Low-severity bugs but infosec pros claim they are a 'critical' overall threat – patch accordingly