When installing an operating system, there is generally the option to remove optional software. Software is also regularly installed and tested during live operations. Each additional application increases the computing and memory load of a client, along with the probability of vulnerabilities arising. Software that is not required is often not subject to regular patch management, which means that even known vulnerabilities are not rectified promptly. Attackers can exploit such vulnerabilities.