Microsoft Defender Vulnerability Management
GeneralHardware and firmware assessment
In brief
The article now explicitly refers to Microsoft Defender XDR plus Microsoft Defender for Identity preview customers and clarifies that BIOS recommendations appear when a specific BIOS version is installed on at least 5% of devices across organizations. Metadata was also updated.
What Defender admins need to know
Administrators can more accurately interpret where BIOS CVEs appear and when BIOS update recommendations are generated; no action is required.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Hardware and firmware assessment
To actively search for processor and BIOS vulnerabilities:
- Search for 'BIOS' CVEs that relate to the processor or BIOS will be returned. This might be available either on the Vulnerabilities page or from the Weaknesses page, depending on if you're
an XDR/MDIa Microsoft Defender XDR + Microsoft Defender for Identity (XDR/MDI) preview customer. For more information, see Microsoft Defender Vulnerability Management and Microsoft Security Exposure Management integration. - Select an item from the list to open a flyout panel with more details on the CVE.
On individual devices view processor and BIOS CVEs by selecting the Discovered vulnerabilities tab. Select a CVE to see a flyout panel with more information:
In the Recommendations page, filter on Remediation type 'Firmware update'.
Recommendations appear to update a specific BIOS version if it'sthat BIOS version is installed on at least 5% of devices across all organizations.
:::image type="content" source="/defender/media/defender-vulnerability-management/firmware-recommendations.png" alt-text="Screenshot of firmware recommendations page":::
@@ -8,13 +8,13 @@ ms.localizationpriority: medium ms.collection: - m365-security ms.topic: how-to-ms.date: 06/12/2026+ms.date: 07/02/2026 appliesto: - Microsoft Defender Vulnerability Management - Microsoft Defender XDR - Microsoft Defender for Servers Plan 2 ai-usage: ai-assisted-ms.custom: msecd-doc-authoring-1014+ms.custom: msecd-doc-authoring-1016 --- # Hardware and firmware assessment@@ -115,7 +115,7 @@ Select **See all details** to get a flyout panel with more information. To actively search for processor and BIOS vulnerabilities: -1. Search for 'BIOS' CVEs that relate to the processor or BIOS will be returned. This might be available either on the **Vulnerabilities** page or from the **Weaknesses** page, depending on if you're an XDR/MDI preview customer. For more information, see [Microsoft Defender Vulnerability Management and Microsoft Security Exposure Management integration](microsoft-defender-vulnerability-management-exposure-management.md).+1. Search for 'BIOS' CVEs that relate to the processor or BIOS will be returned. This might be available either on the **Vulnerabilities** page or from the **Weaknesses** page, depending on if you're a Microsoft Defender XDR + Microsoft Defender for Identity (XDR/MDI) preview customer. For more information, see [Microsoft Defender Vulnerability Management and Microsoft Security Exposure Management integration](microsoft-defender-vulnerability-management-exposure-management.md). 1. Select an item from the list to open a flyout panel with more details on the CVE. On individual devices view processor and BIOS CVEs by selecting the **Discovered vulnerabilities** tab. Select a CVE to see a flyout panel with more information:@@ -128,7 +128,7 @@ To actively search for firmware recommendations: In the [**Recommendations** page](tvm-security-recommendation.md), filter on Remediation type 'Firmware update'. -Recommendations appear to update a specific BIOS version if it's installed on at least 5% of devices across all organizations.+Recommendations appear to update a specific BIOS version if that BIOS version is installed on at least 5% of devices across all organizations. :::image type="content" source="/defender/media/defender-vulnerability-management/firmware-recommendations.png" alt-text="Screenshot of firmware recommendations page":::