Cyber security for virtual environrmnt

Do we need to patch virtual machines?
If we have Windows 10 workstation with VM Player running WindowsXP... Do we need to install and update malware protection in virtual machine (WinXP)
Or updating host only is enough.
 
Top