The Code execution vulns for both OSX and Win10 probably. In windows clicking a UNC path link would pass hashs. I believe for OSX there was an installer trick that allowed any code to run if triggered.
https://www.cvedetails.com/vulnerability-list/vendor_id-2159...
There is nothing new/outstanding.
Once may have been an honest mistake; 2+ times is now a pattern.