Microsoft will keep getting record numbers of CVEs through the next 12 months as there's decades of under investment, particularly in Windows but other areas too.
For the record any basic code scanning tool, not AI, would (and did) highlight these things. I sat on the calls where we discussed them. Nobody would fund fixing it.
@GossiTheDog I can tell you a thing about #swsec... Underinvestment in building security in has been a major problem for 30 years.