IMHO most of the vulnerabilities will come in third party apps like Java, PDF reader, Flash, Firefox, Chrome and IE - as long as you keep those up to date, you'll be ok. And as always, keep an up to date malware scanner running and be on the lookout for announcements about vulnerabilities and what you can do to prevent them.