Comment by SuperQue

Also, it's not always about vulnerabilities directly, but how well / fast things are patched.