Patch rollback is the process of reversing an update so a system returns to a previous, more stable version. It is used when a new build introduces crashes, compatibility errors, boot failures, or performance regressions that outweigh the security or feature benefits of staying current.
In cyber security, rollback matters because patching is not just a technical routine; it is a change to the trusted software stack. Security teams may need rollback plans when a patch breaks endpoint tools, drivers, or line-of-business applications. Attackers can also exploit rollback mechanisms if they can force or spoof downgrade behavior, leaving systems on older, vulnerable code. Defenders therefore pair rollback with testing, version control, integrity checks, and careful change management so recovery does not become a new attack path.