points
Ahem, cough....
Log4Shell (CVE-2021-44228)
Seriously. You're moving goalposts. I think we both know how popular Log4j is and how many millions of Java deployments that Log4j vulnerability affected.