Critical OS patching across PCs running Windows 10 and 11 is behind an average of 127 days, up from 56 days in 2025.

Publisher	Absolute Security
Report	2026 Resilience Risk Index
Published	23 March 2026
Topics	Patching, Endpoint Security, Windows 10, Windows 11, Critical Patching

Published by Absolute Security in 2026 Resilience Risk Index , 23 March 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Related statistics

42% of SMB respondents say AI cyberattack speed makes traditional human-driven patching and response times effectively obsolete.

VikingCloud, 27/05/2026

When open source using organizations were asked if they took steps to improve its patch and vulnerability management processes in the last 12 months, 63.2% said they reviewed/updated internal vulnerability management processes.

TuxCare, 27/05/2026

Among respondents who identified at least one affected technology, vulnerabilities tied to reported open source incidents were distributed across infrastructure and middleware (51.9%), software development frameworks and libraries (50.0%), and databases and data technologies (48.1%).

TuxCare, 27/05/2026

Among the open-source users whose organizations reported a cybersecurity incident, 61.4% indicated that the incident occurred when a patch was available but had not been applied – a slight increase from 60.4% last year.

TuxCare, 27/05/2026

48.5% of surveyed organizations said there was no change in the last 12 months in the time required for patching a critical or high-priority Linux vulnerability once it was detected.

TuxCare, 27/05/2026

92.6% of open-source users reported that their organization was aware it was vulnerable before the cybersecurity incident occurred.

TuxCare, 27/05/2026

Get the newsletter

Weekly cybersecurity statistics by email.