One would expect exploit kits to take advantage of more recent security glitches, but many users do **t apply the latest updates for browser components, or even for the browser itself, and leave the door open to attacks.
Old or new, vulnerabilities permit arbitrary code execution