Patch coverage is the protection a system gets when its software is still receiving vendor security updates for known vulnerabilities. If a platform, version, or edition falls out of support, its patch coverage ends and newly discovered weaknesses remain unfixed unless the organization migrates or compensates with other controls.
In cyber security, patch coverage matters because unpatched systems are easier to exploit and often become long-lived targets in real attacks. Defenders track it to spot versions that no longer get monthly fixes, to verify that update policies are working, and to prioritize upgrades before a support deadline creates exposure. Good inventory is essential: a machine may look healthy while silently running an unsupported build. Patch coverage is therefore both a maintenance metric and a security control, helping teams prove which endpoints are protected and which are aging into risk.