Google’s Project Zero says Microsoft is putting customers at risk by not patching Windows OS versions in the same way and with the same consistency. Inconsistent patches for some bugs had been applied in different ways to each version, resulting in new bugs, some not specific to the other OS branches. The issue of inconsistent patching most likely affects other vendors with large software portfolios, such as Oracle, Linux, Cisco, and others. As soon as Microsoft releases an update, attackers could patch and binary diff the Windows 7, 8.1, and 10 updates and look for.
Source: https://www.bleepingcomputer.com/news/security/google-microsoft-is-putting-users-at-risk-by-not-patching-windows-the-same-way/