Executive summary In this research, we examined the use of large language models for finding the root cause of patched vulnerabilities. We developed a multi-agent system called PatchDiff-AI that autonomously analyzes the root cause of Patch Tuesday vulnerabilities and generates a detailed report. This kind of analysis can help security teams analyze vulnerabilities almost instantly, for either defensive or offensive purposes. By using multiple strategies, we were able to fine-tune our system to achieve a more than 80% success rate in fully automated report generation , including attack vector analysis and triggering flow. Patch Tuesday → Exploit Wednesday Microsoft’s regular update cycle centers on Patch Tuesdays — the second Tuesday of each month, when the company releases a comprehensive list of CVEs and their corresponding fixes. These fixes are shipped as Microsoft Standalone Update (MSU) files, a packaging format that applies updates by patching or replacing core system files.…