Skip to content
NewA calmer, faster ZeroHour
StoryVulnerabilityhighExploited in the wild

Microsoft: 78% of Exploited Vulnerabilities Enable Takeover

3 sources · 3 articlesFirst reported Updated ()1
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Microsoft analysis of 383,000 vulnerabilities shows 78% of 2,056 exploited CVEs allow system takeover, with OS flaws at 41% of exploits.

Microsoft examined approximately 383,000 disclosed vulnerabilities from 1999 to September 2026 and identified 2,056 with real-world exploitation. Takeover types including remote code execution, authentication bypass, and privilege escalation account for 78% of cases. Server-side remote code execution represents 37% of exploited vulnerabilities, while operating system and system code comprise 41% despite making up only 23% of disclosures. Median remediation times range from two weeks for Windows workstations to over one year for network appliances.

Key facts
  • 78% of 2,056 exploited CVEs are takeover types
  • Server-side RCE is 37% of exploited CVEs
  • OS code is 41% of exploited versus 23% of disclosures
  • Median patch time: 2 weeks Windows workstations, over 1 year network appliances
  • Mean time to CISA KEV: 20 days, median 3 days in 2026
  • 29% of 2025 exploits used within 1 day of publication
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

What each outlet adds

beyond the shared facts
  • GBHackers28.96% of 2025 first-time exploited vulnerabilities used before publication
  • CSO OnlineMedian exploitation time of 3 days, mean to CISA KEV catalog of 20 days
  • Cyber Security NewsPatch times range from 2 weeks to over one year
Vendors
Microsoft
Products
WindowsLinuxUnixIoTOTnetwork appliancesWindows serversLinux serversmacOSWindows workstations
Organizations
Microsoft Security Research

Coverage

oldest first · one row per article · UTC
  1. · 19h ago GBHackersFirst report

    Microsoft analyzes 383,000 vulnerabilities, finding 78% exploited are takeover types

    Takeover vulnerabilities including RCE account for 78% of exploited CVEs, with OS code representing 41% of exploited despite 23% of disclosures.

  2. · 18h ago Cyber Security News

    Microsoft Study Shows 78% of Exploited Vulnerabilities Enable System Takeover

    Attackers prioritize flaws giving remote code execution or privilege escalation, with patch times ranging from two weeks to over a year.

  3. · 18h ago CSO Online

    Network appliances stay unpatched for over a year as exploits speed up

    Microsoft analysis of 383,000 CVEs shows median patch time for network appliances exceeds one year while exploitation occurs in days.