The Annual Microsoft Vulnerabilities Report

Microsoft Vulnerabilities Report 2017

The 2017 Microsoft Vulnerabilities Report compiles every Microsoft security bulletin from the past 12 months, analyzes the vulnerability trends, and suggests how each of them could have been prevented. The report offers a comprehensive breakdown, told through engaging graphs and accompanied by insightful commentary. We analyze vulnerabilities in:

  • Internet Explorer
  • Microsoft Office
  • Windows Server
  • Microsoft Edge

Enforcing Least Privilege and Removing Admin Rights Eliminates 80% of Vulnerabilities

This ever-popular annual report makes the compelling case for least privilege, finding that of the 235 Critical vulnerabilities reported in 2017, 80% would be mitigated by removing local admin rights from users.

It’s also worth noting that, from our five-year trends analysis, we discovered that 88% of all Critical vulnerabilities reported since 2013 could have been mitigated by removing admin rights.

Alarmingly, the number of published vulnerabilities has risen by 111% over five years. The report also highlights the largest volume of vulnerabilities found in the past five years, with almost 700 reported vulnerabilities in 2017 alone. Leading security experts weigh in on the results and provide their own analysis of how important least privilege is in dealing with this rise.