That seems a generous guess, given the mitigation of fixing the bug would be much less arduous to do and hasn't been done (for two of the exploits).