 Worms spread by exploiting vulnerabilities in operating systems.Vendors with security problems supply regular security updates (see "Patch Tuesday"), and if these are installed to a machine, then the majority of worms are unable to spread to it.If a vulnerability is disclosed before the security patch released by the vendor, a zero-day attack is possible.