Windows 10 Devices Face Heightened Security Risks with High CVE Count

• •16.9% of Windows devices still run Windows 10, posing severe security risks.
• •Windows 10 devices have 1,903 active CVEs, 2.9 times more than Windows 11.
• •Only 14% of Windows 10 devices have Extended Security Updates applied.

As of July 2026, 16.9% of Windows devices still run Windows 10, posing significant security risks. These devices average 1,903 active CVEs, which is 2.9 times more than the 652 CVEs on Windows 11. Two-thirds of these vulnerabilities are rated high or critical, with an exploitable rate 1.7 times higher than Windows 11. Small and medium-sized businesses, particularly in healthcare and retail, are notably affected, with 21.4% of their machines still on Windows 10. The migration to Windows 11 has slowed significantly, leaving many systems unpatched and vulnerable. Extended Security Updates (ESU) are available until October 2028 for commercial customers, but only 14% of Windows 10 devices have these patches applied. The situation is compounded by vendor dependencies and certification gaps that prevent upgrades.