Following overnight Vulnerability DB sync, two 'Critical' patches from 2012 have been flagged as being required; 11538 and 12648. 

Genuine or a false report?