Critical Microsoft Vulnerabilities Doubled: From Exposure to Escalation

The BeyondTrust 2026 Microsoft Vulnerabilities Report reviews 1,273 Microsoft vulnerabilities disclosed in 2025 and warns that although total counts are stable, critical vulnerabilities doubled—driven by elevation-of-privilege and information-disclosure flaws concentrated in Azure/Dynamics, Windows Server, and Microsoft Office—creating high-impact risk through identity abuse and lateral movement; the report urges organizations to prioritize privilege reduction, identity controls, and continuous risk assessment rather than relying solely on patching.