I think the chances of a vulnerability being leveraged in your scenario is extremely low. For a machine connected to the network, the longer it goes without patching, the higher the chances of a security incident