Updating software is hit or miss a lot these days, and WordPress is no exception.
A dodgy patch from the author, an overlooked incompatibility or a user going rogue and installing a dodgy plugin.