Executive summary

In this research, we examined the use of large language models for finding the root cause of patched vulnerabilities.

We developed a multi-agent system called PatchDiff-AI that autonomously analyzes the root cause of Patch Tuesday vulnerabilities and generates a detailed report.

This kind of analysis can help security teams analyze vulnerabilities almost instantly, for either defensive or offensive purposes.

By using multiple strategies, we were able to fine-tune our system to achieve a more than 80% success rate in fully automated report generation , including attack vector analysis and triggering flow.

Patch Tuesday → Exploit Wednesday

Microsoft’s regular update cycle centers on Patch Tuesdays — the second Tuesday of each month, when the company releases a comprehensive list of CVEs and their corresponding fixes.…