Pixel 2 stopped getting updates almost 5 years ago

That doesn't answer the question.

There are two kinds of people:

1. Those who can extrapolate from incomplete information

Please, feel free to extrapolate for me whether the "unspecified vulnerability" referenced in the article was introduced more or less than five years ago.

The point was the whole phone has been vulnerable to a multitude of RCEs for five years, so it doesn't really matter if its the latest exploit, its a silly request.