Oh, so this is just another biased opportunistic bash at Microsoft. I get it. 
FTR, Windows is safe if (1) the user keeps it current, (2), the user uses an able anti-malware solution and keeps it current, and (3) the user is not click-happy on unsolicited links, popups, downloads, and attachments.
That's not exploitation. That's just proving (in a laboratory setting) the flaw exists. Exploitation is where a bad guy has hacked into on on-line system and exploited the flaw.
Please, stop spreading FUD.
