BeyondTrust-Microsoft-Vulnerability-Report-2026.md

**Executive Summary:** The BeyondTrust 2026 Microsoft Vulnerabilities Report reviews 2025 Microsoft disclosures, noting a slight drop in total vulnerabilities but a doubling of critical issues driven by spikes in Office and Azure/Dynamics, several CVSS 10.0 flaws (notably an Entra ID tenant-separation token issue and an Azure Container Apps RCE), rising information disclosure and identity-focused risk, and an expanded attack surface from non-human identities and agentic AI that amplifies real-world exploitation potential.