winjer
Member
Microsoft beat a lot of records in 2024, by having more software vulnerabilities than ever.
And these are just the ones that were found out.....
And these are just the ones that were found out.....
Key Findings from the 2025 Report
- Total vulnerabilities rose to 1,360 in 2024—a record high since the report began.
- The Elevation of Privilege (EoP) category accounted for a massive 40% (554) of the total vulnerabilities last year.
- Microsoft Azure and Dynamics 365 vulnerabilities plateaued in 2024.
- Microsoft Edge experienced a 17% increase to 292 vulnerabilities last year, with 9 critical (an 800% jump).
- There were 587 Windows vulnerabilities in 2024, 33 were critical.
- Windows Server had 684 vulnerabilities in 2024, 43 were critical.
- Microsoft Office experienced 62 vulnerabilities in 2024, almost double that of 2023.
"The dominance of Elevation of Privilege vulnerabilities in Windows systems should set off alarm bells for every security professional. At 40% of all vulnerabilities, this category represents the most critical attack surface that defenders need to monitor and control."
—Kip Boyle, CISO, Cyber Risk Opportunities LLC
