The patch reality gap: How fast SMBs really patch and what are the risks

**Executive summary:** Acronis H2 2025 telemetry shows median installation times of 185 hours (7.7 days) for Microsoft patches and 136 hours (5.7 days) for third-party patches, with long-tail P90 values (Microsoft P90 926 hours / 38.6 days) indicating significant backlog and operational risk; roughly half of patch candidates remain New/Pending and a large share become Obsolete. The report compares country performance, highlights operational causes (reboot delays, endpoint reachability), and recommends tail-focused workflows, reboot discipline, staged rollouts, separate OS/app reporting, and monitoring to reduce exposure and support costs.