Microsoft CVE Volumes on Relentless Upward Trajectory
Computer Weekly, Tuesday, October 13th, 2026
October Patch Tuesday topped 1,400 CVEs, and experts say monthly, count-based triage no longer works.
Microsoft's October Patch Tuesday addressed more than 1,400 CVEs, more than in all of 2023 and well above September's record of about 1,000, with AI-assisted discovery a major driver.
ZDI's Dustin Childs described a breaking point for enterprise patch management, saying hundreds of CVEs per release are now the baseline.
He argues that AI is shortening the time between a bug existing and someone noticing it, rather than creating bugs.
Teams that triage by CVE count instead of exploitability are spending effort on the wrong flaws, and monthly patch cycles leave networks exposed.