I think it's a reasonable ask to know: * What is the vulnerability? * Am I affected?

It's very difficult to answer those two questions, through all the marketing and fluff text.