Comment by limagnolia

Buried in the Citizenlab report are links to CVEs from Windows and Chrome that the report says were exploited. These CVE's date back to the early 20's and have been patched.

As I skimmed the CitizenLab report, it was particularly interesting to see the history of the company and how they may have been acquired specifically to use as a covert operation.