A mobile security awareness trainer is explaining what happens when a user ignores the 'Your iPhone software is out of date' notification for several months. Which is the most accurate security risk description?

• A.A. Outdated iOS only affects App Store functionality; security is not impacted
• B.C. Outdated iOS only matters for devices connected to enterprise networks; personal devices are not targeted
• C.B. Running outdated iOS means the device is exposed to known, publicly disclosed CVEs that attackers can exploit using published exploit code; the longer updates are delayed, the more time attackers have to weaponize and target the known vulnerabilities
• D.D. Apple continues to provide security patches for all iOS versions simultaneously, so running an older version does not create a vulnerability gap