I take it you're familiar with threat trees? Any vulnerability is serious. It's just another vector that either realises a threat, or brings the attacker closer to realising a threat.