The exploits that aren't patched don't allow code execution e.g. virus execution.