Microsoft Analyzes 380,000 Vulnerabilities, Identifying 0.5% as Exploited
- Published
- Source
- ITmedia.co.jp
Microsoft has analyzed approximately 380,300 Common Vulnerabilities and Exposures (CVEs) published from 1999 to September 2026, revealing that only 2,056, or about 0.5%, have been exploited in actual attacks. The analysis highlights the increasing speed at which vulnerabilities are exploited after publication, with the average time from disclosure to exploitation decreasing significantly over the years.
This finding is crucial for security professionals as it emphasizes the need to prioritize which vulnerabilities to address first, especially given the lengthy patch application times for various systems. For instance, while the median time to patch Windows workstations is about two weeks, it exceeds one month for Windows Server and can take over a year for network devices.
Microsoft recommends focusing on vulnerabilities that allow for system takeover, such as Remote Code Execution (RCE) and local privilege escalation, which account for 78% of the exploited vulnerabilities. The company stresses the importance of understanding the actual impact and exploitability of vulnerabilities to effectively prioritize remediation efforts.
Original report
[ITmedia エンタープライズ] 脆弱性38万件のうち悪用されたのは約0.5％ Microsoftが示す「先に対処すべき脆弱性」とは？
ITmedia.co.jpThis briefing is an independently written summary based on publicly available reporting and is provided for industry information and news discovery. The original report and source publication are credited and linked where applicable. RobotToday does not claim ownership of third-party source material.
Rights concerns? Contact [email protected] with the relevant URL and details. We will review the matter and take appropriate action where warranted.
More related news
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
Related Suppliers
Microsoft Corporation (Robotics)
United States
Microsoft provides robotics developers ROS-on-Windows support, the AirSim open-source simulation platform, and Azure cloud services for robot fleets and AI.
SkySafe
United States
US drone detection and airspace intelligence SaaS; detects 96% of drone models; delivers real-time tracking and courtroom-ready forensics for security clients.
DAHUA TECHNOLOGY Zhejiang Dahua Technology Co Ltd
China
Hangzhou, China video-surveillance manufacturer founded 2001, listed on the Shenzhen Stock Exchange (002236); one of the two largest makers worldwide.
Petra
United States
San Francisco startup that built a semi-autonomous tunnel-boring robot to underground utilities through hard rock geologies.
Shift5
United States
Operational intelligence platform securing onboard OT across US military aircraft, vehicles, and vessels against cyber threats and failures.
Callisto (Beijing) Technology Co., Ltd. 木卫四科技
China
Beijing automotive cybersecurity firm founded 2021; S3-VSOC platform reportedly monitors more than 2.8 million connected vehicles.
IUVO
Italy
Italian wearable robotics spin-off of Scuola Superiore Sant'Anna (Pisa, 2015), developing passive and active exoskeletons backed by COMAU and Össur.
Botyard AI 伯牙智能
China
Chinese dexterous-hand startup (2024) co-founded by ex-Alibaba executives and robotics professors; Gaoshan S1 has 22 DOF tendon-driven hand; $20M raised.
LAYERED GmbH
Switzerland
Swiss ETH Zurich spin-off building an autonomous mobile plastering robot that spray-prints thin coating layers on site; first robots deployed in 2025.
SunCubes Srl
Italy
Milan deep-tech startup developing laser-based optical wireless power transmission systems for drones, UAVs, and underwater autonomous vehicles.
JIZAIE, Inc.
Japan
Japanese robotics firm developing the common mobile base unit with swappable sensors for the NEDO-funded Takenaka construction robot platform.
Insitu Inc.
United States
Bingen, Washington maker of the ScanEagle and Integrator ISR drones; a Boeing subsidiary that has fielded 3,500+ UAS for armed forces in 35 nations.
Robotics needs a service framework.
RSF defines a common language for robot service capability, lifecycle operations, certification pathways, and service-provider networks.
Join the RobotToday community on LinkedIn
Daily robotics news, in-depth analysis, conference highlights, and discussions with professionals worldwide.
