Some Magento vulnerabilities may be very serious. For example, in March 2019 researchers detected a PRODSECBUG-2198 vulnerability, which was an SQL Injection vulnerability. This vulnerability allowed attackers to steal credit card data but it could have had even more consequences such as the attacker getting control over other systems.
Find out more about potential consequences of serious vulnerabilities.