They can undo previous transactions / blocks, but it takes a lot of work (the older the block the more work it takes). For recent transactions (last block) it may be practical, that's why 6 confirmations are advised for high value transfers.

It can also corrupt state if the target clients are light (and only verify headers).