Microsoft Security Intelligence Report (Volume 18: July 2014 – December 2014)
Pay particular attention to the featured report: “The life and times of an exploit.” An exploit that was successfully used despite a patch being available.
A good illustration that once buggy software is “in the wild,” patching those bugs only protects users bright enough to apply the patches.
For example, 77% of PCs are running unpatched Java JREs.
The lesson here is that patch maintenance is a necessary evil but to avoid evil altogether, less buggy software should be the goal.