Factsheet Software has an expiry date

Software vendors regularly make announcements that certain versions of software will no longer be supported after a particular date. Such dates are known as End-of-Life. After the End-of-Life, software is no longer supported and can therefore not be considered to be secure. The NCSC advises to update systems after the announcement as soon as possible.

Software that is still being used after its End-of-Life will become increasingly vulnerable to attacks. When an End-of-Life announcement is made, you should start with the upgrade process as soon as possible. Upgrading may lead to compatibility problems with other programs. Therefore you should start to plan, test and implement upgrades as soon as possible.

Some systems, such as medical or industrial machinery, cannot be upgraded: alternative measures exist for these, but they require intensive administration. Read the factsheet Software has an expiry date for more information and advice on how to deal with End-of-Life of software.

This document is currently under revision, which means that the document has not been reviewed or changed in the past year. As a result, the content of the document may not be up-to-date. The NCSC intends to update this product in the near future.