Vulnerable if patched after exploit?

You need to clean your machine, whether it is a virus, a trojan or adware/spyware. Security updates do not clean your machine.

Run reputable antivirus and antispyware software several times and restart the machine until you are satisfied that the machine is clean. If the exploit is still there, the updates may not succeed.

Your machine needs to be behind a firewall. It is best to have an application running which warns you if rogue software tries to change the settings, for example by attempting to write into the Windows startup folder or the Run key in the registry.

If all you do is patch the exploited unit the answer is defiantly YES as all you have done is shut the door after the horse has bolted.

You need to clean of any infections by running Spy Ware/Mal-Ware scans over the machine and an up to date AV Product as well after you have removed the exploit you'll be safe from further exploits of that same type but with Windows being the way that it is you'll be far better off running it behind a Hardware Firewall something like a Router will do a better job than any Software firewall which after all is still running on Windows which is so exploitable so that limits the effectiveness of any firewall.

Col

YES ! absolutely ! Unless you have eradicated the source and seeds of the "item" that exploited your system . Use strong eradication tools to completely clean your system from threats . Run several checking software testing the presence of the threat . THEN update/upgrade etc.If you sense exploit after the upgrade do the cycyle over, final solution FORMAT !.