Microsoft Defender Vulnerability Management
GeneralTvm Software Inventory
In brief
The documentation now describes vulnerability reporting for supported Microsoft Store applications, including Microsoft Store-tagged CVE evidence and suggested queries.
What Defender admins need to know
Administrators can use the tag and query to identify affected Store apps and should manage their versions through the Microsoft Store.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
:::image type="content" alt-text="Software evidence example of Microsoft Edge showing evidence registry path as seen on a device page" source="/defender/media/defender-vulnerability-management/tvm-sw-inventory-evidence-small.png" lightbox="/defender/media/defender-vulnerability-management/tvm-sw-inventory-evidence.png":::
Software pages
Microsoft Store applications (Preview)
Supported applications include:
You can view software pages in the Microsoft Defender portalYou can view software pages inDefender Vulnerability Management reports vulnerabilities detected on applications installed via the Microsoft Defender portalMicrosoft Store. CVE evidence for these applications includes the Microsoft Store tag along with a suggested query showing the vulnerable application, version, and file location.
Software pages
@@ -92,6 +92,27 @@ Select a software name to open its flyout, and look for the section called **Sof :::image type="content" alt-text="Software evidence example of Microsoft Edge showing evidence registry path as seen on a device page" source="/defender/media/defender-vulnerability-management/tvm-sw-inventory-evidence-small.png" lightbox="/defender/media/defender-vulnerability-management/tvm-sw-inventory-evidence.png"::: +### Microsoft Store applications (Preview)++Defender Vulnerability Management reports vulnerabilities detected on applications installed via the Microsoft Store. CVE evidence for these applications includes the **Microsoft Store** tag along with a suggested query showing the vulnerable application, version, and file location.++> [!NOTE]+> You can manage application versions through the Microsoft Store. Don't directly access or manage app files via the file path in the WindowsApps directory, to prevent issues with the OS environment.++Supported applications include:++- Microsoft Teams+- Mozilla Firefox+- WhatsApp+- Slack+- Dropbox+- DuckDuckGo+- Dell Command+- HP Smart+- HP Support Assistant+- Dell SupportAssist for Home PCs+- NVIDIA Control Panel+ ## Software pages You can view software pages in the [Microsoft Defender portal](https://security.microsoft.com) a few different ways: