vulnerability patch wave