[quote]
"It is very difficult, for example, to quantify the value that Microsoft brings indirectly, including ... high levels of security and trust,"
Microsoft brings high level of security and trust? ...
[/quote]
Yeah, that bit about "...high levels of security and trust..." must have been a quote from Truth Social or something.
What's the average number of critical vulnerabilities in a Patch Tuesday? And what's the trend in that number?
Somebody must have all the data, but from the sample immediately and easily available to me it doesn't exactly look inspiring:
https://www.theregister.com/2019/06/11/patch_tuesday/ [...88 CVE-listed flaws...]
https://www.theregister.com/2019/07/10/patch_tuesday_july/ [For Microsoft, July brings fixes for a total of 78 CVE-listed vulnerabilities.]
https://www.theregister.com/2019/08/13/windows_rdp_patch_tuesday/ [Among the 93 CVE-listed flaws patched this month are four particularly serious remote-code execution bugs...]
https://www.theregister.com/2019/09/10/patch_tuesday_abode_sap/ [and the kitchen sink...]
https://www.theregister.com/2019/10/08/october_patch_tuesday/
https://www.theregister.com/2019/12/10/patch_tuesday_december_2019/
https://www.theregister.com/2020/01/14/patch_tuesday_january_2020/
https://www.theregister.com/2020/03/11/patch_tuesday_march_smbv3/ [No patch available yet!]
https://www.theregister.com/2020/04/14/april_patch_tuesday/
https://www.theregister.com/2020/07/15/july_2020_patch_tuesday/ [Windows DNS servers (mostly also domain controllers). Huge issue. Been there ~20 years.]
https://www.theregister.com/2020/08/11/patch_tuesday_august/
https://www.theregister.com/2020/09/08/patch_tuesday_september/ [Horrifying, but slightly better than typical.]
https://www.theregister.com/2020/10/13/microsoft_patch_tuesday/
https://www.theregister.com/2020/11/11/patch_tuesday_updates/ [One hundred and twelve Microsoft security patches this Tuesday.]
https://www.theregister.com/2020/12/08/patch_tuesday_fixes/ [Quite a selection.]
https://www.theregister.com/2021/01/12/patch_tuesday_fixes/ (...again).
https://www.theregister.com/2021/04/13/patch_tuesday_april/
https://www.theregister.com/2021/05/11/microsoft_patch_tuesday_exchange_hyperv/
https://www.theregister.com/2021/06/09/june_patch_tuesday/
https://www.theregister.com/2021/07/14/patch_tuesday/
https://www.theregister.com/2021/08/10/microsoft_patch_tuesday/ [This made the news - only 44 vulnerabilities this month!]
https://www.theregister.com/2021/10/12/microsoft_patch_tuesday/ [This month: 1 low severity, 68 important, 2 critical.]
https://www.theregister.com/2021/11/09/microsoft_spreads_patch_tuesday_joy/ [55 important vulnerabilites, including 6 critical, patched on tuesday 9th November 2021.]
https://www.theregister.com/2022/01/12/january_patch_tuesday/
https://www.theregister.com/2022/01/13/microsoft_patch_tuesday_titsup/
https://www.theregister.com/2022/01/18/patching_patch_tuesday/
https://www.theregister.com/2022/03/09/microsoft_patch_tuesday/
https://www.theregister.com/2022/04/13/microsoft_patch_tuesday/ [Over 100 fixes including ten critical vulnerabilities in this month's Patch Tuesday.]
https://www.theregister.com/2022/05/11/microsoft_patch_tuesday/ [Only seventy-odd this month, seven critical.]
https://www.theregister.com/2022/06/15/microsoft_patch_tuesday/
https://www.theregister.com/2022/07/12/microsoft_july_patch_tuesday/ [June's zero-day fault gets patched in July...]
https://www.theregister.com/2022/08/09/august_patch_tuesday_microsoft/
https://www.theregister.com/2022/09/13/microsoft_patch_tuesday_september_2022/
https://www.theregister.com/2022/10/11/october_patch_tuesday/
https://www.theregister.com/2022/11/09/microsoft_november_2022_patch_tuesday/
https://www.theregister.com/2022/12/14/microsoft_december_patch_tuesday/
https://www.theregister.com/2022/12/14/microsoft_patch_tuesday_vm/
https://www.theregister.com/2023/01/11/patch_tuesday_january_2023/ [98 vulnerabilities patched in the first Patch Tuesday of the year - some of them already under exploit.]
https://www.theregister.com/2023/03/14/microsoft_patch_tuesday/
https://www.theregister.com/2023/04/11/april_patch_tuesday_ransomware/
https://www.theregister.com/2023/05/09/microsoft_may_patch_tuesday/ [This month, a relatively low number of fixes: only 38.]
https://www.theregister.com/2023/07/11/microsoft_patch_tuesday/ [One hundred and thirty vulnerabilities addressed - but a zero-day one-click compromise isn't.]
https://www.theregister.com/2023/08/08/microsoft_intel_august_patch_tuesday/ [Note the bypass of the bypass of the bypass of the patch of the patch of the patch!]
https://www.theregister.com/2023/10/10/october_2023_patch_tuesday/ [Microsoft on Tuesday issued more than 100 security updates...]
https://www.theregister.com/2023/11/15/november_2023_patch_tuesday/ [...fixes for about 60 vulnerabilities – including three that have already been found and abused in the wild.]
https://www.theregister.com/2023/12/13/december_2023_patch_tuesday/ [Microsoft: 36. Adobe: 212. Yep, that's in one month.]
https://www.theregister.com/2024/01/09/january_patch_tuesday/ [A relatively calm start to the year for Microsoft, only 49 vulnerabilities this month, including 12 RCE, two critical...]
https://www.theregister.com/2024/02/14/patch_tuesday_feb_2024/ [73 vulnerabilities this month, FIVE critical and under active exploitation.]
https://www.theregister.com/2024/05/14/microsoft_may_patch_tuesday/ [60 Windows CVEs]
https://www.theregister.com/2024/06/12/june_patch_tuesday/ [Only 47 Microsoft security issues this Tuesday.]
https://www.theregister.com/2024/07/10/july_2024_patch_tuesday/ [Tuesday's software updates address more than 130 Microsoft CVEs.]
https://www.theregister.com/2024/10/08/patch_tuesday_october_2024/ [...this one is a doozy. Microsoft has delivered 117 patches...]
https://www.theregister.com/2025/01/15/patch_tuesday_january_2025/ [...three under-attack privilege-escalation flaws in its Hyper-V hypervisor, plus plenty more...]
https://www.theregister.com/2025/04/08/patch_tuesday_microsoft/ [...11 critical issues in its code to fix. Redmond delivered fixes for more than 120 flaws this month...]
https://www.theregister.com/2025/06/10/microsoft_patch_tuesday_june/ [Just 66 fixes - some under active attack - this Tuesday.]
https://www.theregister.com/2025/08/12/august_patch_tuesday/ [...111 problems in its products, a dozen of which are deemed critical...]