A vulnerability gets disclosed on a Tuesday. Proof-of-concept exploit code appears online by Thursday. Your patch, scheduled for the next maintenance window, is still three weeks away. That gap is…