The website for the M1racles security vulnerability is an excellent demonstration that not all vulnerabilities are exploitable. Be sure to read the FAQ through to the end.

EDITED TO ADD: Wired article.

Source: schneier.com