32% of top-exploited vulnerabilities are over a decade old