The Adobe Severity Rating System is a guideline to help our developers assess the security impact of known software vulnerabilities. Because vulnerabilities do not impact all users in the same way, we designed our rating system to help customers decide which patches and updates they should apply or how rapidly they need to take action. We will send detailed information about the specific vulnerabilities through security bulletins. The rating system only provides a way to quickly assess risk.
The definitions of the ratings are:
Rating | Definition |
---|---|
Critical | A vulnerability, which, if exploited would allow malicious native-code to execute, potentially without a user being aware. |
Important | A vulnerability, which, if exploited would compromise data security, potentially allowing access to confidential data, or could compromise processing resources in a user's computer. |
Moderate | A vulnerability that is limited to a significant degree by factors such as default configuration, auditing, or is difficult to exploit. |
Low | A vulnerability that has minimal impact and is extremely difficult to exploit. |