The 0-day probably got away with not being Critical because it’s not an outright remote code execution (RCE) hole, meaning that it can’t be exploited by someone who hasn’t already hacked into your computer.

Source: https://nakedsecurity.sophos.com/2023/04/12/microsoft-fixes-a-zero-day-and-two-curious-bugs-that-take-the-secure-out-of-secure-boot/

The project is one of three in Florida and 63 across the U.S. to receive funding from a new Rail Crossing Elimination program (RCE), with a goal of improving safety and fluidity along the corridor shared with Brightline.

Source: https://www.sun-sentinel.com/2023/09/02/from-sunrise-to-australia-a-child-abuse-network-letters-to-the-editor/

We’re sharing our discovery and analysis of multiple high-severity vulnerabilities in the CODESYS V3 SDK that could put OT infrastructure at risk of attacks like RCE and DoS.

Source: https://www.ibtimes.co.uk/microsoft-worlds-most-impersonated-brand-report-1718606