Based on our experience, since the vast majority of deployed code is never actually used in runtime, prioritizing and focusing on what’s actually loaded and thus exploitable dramatically reduces patching efforts by up to 60%.