The implication here is that Microsoft didn't actually improve their security so much as Oracle and Adobe failed to keep up with theirs. I don't know whether you intended to say that, but either way, it's a false statement.
...or a criticism of Oracle and Adobe, which is then 100% true statement.