Microsoft critical vulnerabilities doubled in 2025 — what it means

Microsoft environments are prime targets for threat actors, with evolving vulnerabilities requiring more than routine patching. As critical vulnerabilities surge and non-human identities grow in cloud and AI infrastructure, risks extend beyond traditional endpoint security.

This report analyzes Microsoft's 2025 vulnerability trends, offering actionable guidance to enhance security. Key findings include:

• Critical vulnerabilities doubled, rising from 78 to 157
• Elevation of Privilege made up 40% of vulnerabilities
• Azure and Dynamics 365 saw a near-tenfold rise in critical vulnerabilities

Read the full report for expert insights and best practices to mitigate risks.