Old Windows Bugs in KEV: Duqu Font, IE ActiveX, CLFS
All three bugs were fixed between 2011 and 2021 and are closed on any supported Windows host that takes monthly updates; the real job is finding machines that missed years of patches or still run end-of-life Windows.
Must act: Owners of Windows hosts with no cumulative update since December 2021, and of any XP, Vista, 7, 8 or Server 2003/2008 machines still running in labs, factories or legacy applications.
Can relax: Teams whose Windows fleet runs supported releases on current monthly updates; every fix for these three CVEs is at least four years old.
- Export Windows versions and builds from your endpoint or patch tool and flag every end-of-life release (XP, Vista, 7, 8, 8.1, Server 2003, 2008).
- Upgrade or replace end-of-life machines; if one must stay, cut its internet access, block browsing and document handling on it, and limit who can log on.
- Bring every supported host to the latest cumulative update, not just the December 2021 build.