NIST TO IMPLEMENT 'DEFERRED' STATUS TO DATED VULNERABILITIES

Summary from the TLDR InfoSec newsletter

NIST announced all CVEs published before January 1, 2018, will be marked "deferred" in the National Vulnerability Database. This administrative change helps prioritize newer vulnerabilities but doesn't reduce the severity of older security flaws.