Critical OS patching across PCs running Windows 10 and 11 is behind an average of 127 days, up from 56 days in 2025.

May 27, 2026

Patching Endpoint Security Windows 10 Windows 11 Critical Patching

Critical OS patching across PCs running Windows 10 and 11 is behind an average of 127 days, up from 56 days in 2025. — This cybersecurity statistic was published by Absolute Security in May 2026. It covers topics including Patching, Endpoint Security, Windows 10, Windows 11, Critical Patching. The original data appears in 2026 Resilience Risk Index . For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 3/23/2026

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

Critical OS patching across PCs running Windows 10 and 11 is behind an average of 127 days, up from 56 days in 2025. This data was published by Absolute Security and covers Patching, Endpoint Security, Windows 10, Windows 11, Critical Patching.

Where does this data come from?

This statistic comes from 2026 Resilience Risk Index , published by Absolute Security on May 27, 2026. You can view the original report at https://www.absolute.com/resources/research-reports/2026-resilience-risk-index.

What cybersecurity topics does this cover?

This statistic relates to Patching, Endpoint Security, Windows 10, Windows 11, Critical Patching. Browse more statistics on Patching or from Absolute Security.

CYBERSTATS

Critical OS patching across PCs running Windows 10 and 11 is behind an average of 127 days, up from 56 days in 2025.

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

92.6% of open-source users reported that their organization was aware it was vulnerable before the cybersecurity incident occurred.

When open source using organizations were asked if they took steps to improve its patch and vulnerability management processes in the last 12 months, 44.8% said they conducted security training.

48.5% of surveyed organizations said there was no change in the last 12 months in the time required for patching a critical or high-priority Linux vulnerability once it was detected.

Only 1% of organizations said they decreased the time required for patching a critical or high-priority Linux vulnerability after it was detected.

42% of SMB respondents say AI cyberattack speed makes traditional human-driven patching and response times effectively obsolete.

Among the open-source users whose organizations reported a cybersecurity incident, 61.4% indicated that the incident occurred when a patch was available but had not been applied – a slight increase from 60.4% last year.

Browse by Topic

Stay Ahead of Cyber Threats