trying to understand the window of vulnerability

when a security breach has been identified in SMB server and the patch wont be available for 3 days and its gonna take a week to test and download and install the patch so im trying to understand how to calculate the WoV for the SMB server