Several workstations on a network are found to be on OS versions that are vulnerable to a specific attack. Which of the following is considered to be a corrective action to combat this vulnerability?

Installing an antivirus definition patch updates the antivirus software's ability to detect malware, but it does not fix underlying operating system vulnerabilities.

Educating workstation users helps prevent them from contributing to security incidents or falling for social engineering, but it does not directly fix a technical vulnerability in the operating system itself.

Leveraging server isolation helps segment network resources and protect servers, but it does not address or fix vulnerabilities present on workstation operating system versions.

Installing a vendor-supplied patch is the direct technical solution for an identified OS vulnerability, as vendors release these patches specifically to fix known security flaws and eliminate the vulnerability from the system's codebase.

Installing an intrusion detection system (IDS) detects malicious activity or exploitation attempts, but it does not remove or fix the underlying OS vulnerability itself; it is a monitoring tool, not a corrective patch.