points
There are also non security bugs that don't have exploits but just make the user experience worse.