Magento releases patches when it finds any vulnerability in the system to make system more secure, Magento has recently launched the patches on Nov 26, 2014 and Feb 9, 2015, It is very much recommended to install the patch as soon as possible because your Magento store can be vulnerable till then and hacker can hack your data information.

Magento has already released one patch last year, but 80% of Magento stores haven’t applied and so those were vulnerable, so Magento have to send notification to install patches and make your Magento store secure. This Remote code vulnerability was originally founded by Check Point and reported about the issue to [magecomp.com]Magento[/magecomp.com].