In general, any vulnerability is a risk. Even regular updates and patches do not provide complete protection for your systems because mission-critical applications often rely on outdated system dependencies that do not allow for current patches. In addition, updates can introduce new vulnerabilities and security holes.