The disclosure includes one vulnerability that has been exploited and one that has been publicly disclosed.
