A recent zero-day vulnerability is being actively exploited, requires no user interaction or privilege escalation, and…

A recent zero-day vulnerability is being actively exploited, requires no user interaction or privilege escalation, and has a significant impact to confidentiality and integrity but not to availability. Which of the following CVE metrics would be most accurate for this zero-day threat?