Microsoft has addressed more than 1100 security vulnerabilities in Windows during its most recent Patch Tuesday, the highest number recorded in a single monthly update cycle.
Nuno Costa, a Microsoft representative, stated that the large volume of CVEs does not indicate that Windows has become less secure. Instead, he explained, it shows that more vulnerabilities are being found and patched, thereby reducing opportunities for attackers to exploit them.
The Common Vulnerabilities and Exposures (CVE) system managed by MITRE is used globally to track and identify security flaws. These identifiers are stored in the National Vulnerability Database (NVD), which now contains approximately 400,000 entries issued since 1999.
Costa noted that artificial intelligence is contributing to the discovery of additional vulnerabilities. He stressed that patching is only one part of the process and that rapid installation of updates is equally important for maintaining security.
According to Microsoft data from August, fewer than half of enterprise Windows computers had installed patches released two weeks earlier. One quarter of business systems remained unpatched after four weeks.
Costa urged companies to deploy updates more quickly, especially as attackers increasingly exploit vulnerabilities shortly after disclosure.
