The product security incident response team (PSIRT) has decided to make a formal public disclosure,...

The potential for increased public awareness of a vulnerability is probable, which could lead to higher risk for customers.

The vulnerability reporter has threatened to make the finding public after being notified that their case was not credible.

The response team has determined that the vulnerability is credible.

Notification of a vulnerability from an external party has occurred.