@ZOU1:
Patching vulnerabilities is a useless and endless battle. There are always going to be vulnerabilities out there and often a patch can cause other vulnerabilities to emerge.
What Microsoft needs to do is to always assume that they will be exploited and then work to protect the user even if they do have malware/ exploits present.