Microsoft Defender Vulnerability Management
GeneralFixed Reported Inaccuracies
In brief
The page now lists detection and recommendation fixes, updated Python end-of-support details, and MDVM support for Intel Endpoint Management Assistant and several Microsoft extensions, dated September 7–23 and October 3–9, 2026.
What Defender admins need to know
Reports and recommendations may change for affected products and vulnerabilities. No administrator action is specified.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
The following tables present the relevant vulnerability assessment information organized by month.
October 2026
| Inaccuracy report ID | Description | Fix date |
|---|---|---|
| - | Added accurate EOS details for Python | 03-October-26 |
| 145601 | Improved detection logic for Debian Cryptsetup | 04-October-26 |
| 148656 | Improved detection logic for Red hat Kernel-uek-virt | 04-October-26 |
| 149969 | Improved accuracy for Microsoft Remote Desktop Client | 04-October-26 |
| 150741 | Improved detection logic for MOBOTIX MxControlCenter | 04-October-26 |
| 148797 | Improved detection logic for Bitdefender Internet Security by excluding invalid path- "wsccommunicator.exe" | 04-October-26 |
| 150595 | Improved detection logic for WinSCP by excluding invalid path- "setup.exe" | 04-October-26 |
| 149860 | Improved accuracy for Postman by adding 1.0 as invalid version | 04-October-26 |
| 152246 | Fixed incorrect recommendations in Sonicwall NetExtender Vulnerabilities - CVE-2026-66152, CVE-2026-66153 | 04-October-26 |
| - | Fixed incorrect recommendations in Gimp Vulnerabilities - CVE-2026-59089, CVE-2026-59091, CVE-2026-66757 | 04-October-26 |
| - | Fixed incorrect recommendations in Zscaler Client connecter Vulnerability - CVE-2026-25687 | 04-October-26 |
| - | Improved detection logic for Office by correlating Office SAC audience aliases | 04-October-26 |
| 154833 | Improved detection logic for Debian Aom | 04-October-26 |
| 152058 | Added MDVM support for Intel Endpoint Management Assistant | 08-October-26 |
| - | Added MDVM support for Microsoft App Installer | 08-October-26 |
| - | Added MDVM support for Microsoft Raw Image Extensions | 08-October-26 |
| - | Added MDVM support for Microsoft Webp Image Extension | 08-October-26 |
| - | Added MDVM support for Microsoft HEIF image extension | 08-October-26 |
| - | Added MDVM support for Microsoft Web media extension | 08-October-26 |
| - | Fixed incorrect detections in DeepSeek | 08-October-26 |
| 153571 | Fixed incorrect RustDesk detections under HashiCorp Terraform | 08-October-26 |
| 153374 | Fixed incorrect MacPass detections under Keepassxc | 08-October-26 |
| 154932 | Fixed incorrect ShareX detections under Techsmith Snagit | 08-October-26 |
| 154333 | Fixed incorrect Learning Tools for OneNote detections under Microsoft OneNote | 08-October-26 |
| 155205 | Fixed incorrect Atera agents detections under Zoom Meetings | 08-October-26 |
| 150587 | Improved detection logic for Veeam one | 09-October-26 |
| 152146 | Fixed incorrect recommendations for Vulnerability - CVE-2026-70466 by excluding FortiOS CPE | 09-October-26 |
| 154594 | Fixed incorrect recommendations for Vulnerability - CVE-2014-0242 by excluding Apache HTTP Server CPE | 09-October-26 |
| 150245 | Fixed incorrect recommendations for Vulnerability - CVE-2021-44228 by excluding oracle weblogic server CPE | 09-October-26 |
| 152671 | Fixed incorrect recommendations in JMESPath (PHP) Vulnerability - CVE-2026-54133 | 09-October-26 |
| 153056 | Fixed incorrect recommendations for Vulnerability - CVE-2017-15097 by excluding PostgreSQL CPE | 09-October-26 |
| 152913 | Fixed incorrect recommendations for Hashi Corp Vulnerability - CVE-2022-42717 | 09-October-26 |
September 2026
| Inaccuracy report ID | Description | Fix date |
|---|---|---|
| 152264 | Fixed incorrect detections in Apple iMovie | 07-September-26 |
| 152487 | Fixed incorrect detections in Google Earth | 07-September-26 |
| 152303 | Added MDVM support for FastTrack Admin By Request | 07-September-26 |
| - | Improved version detection logic for Teams for Android | 12-September-26 |
| - | Fixed incorrect recommendations for Vulnerability - CVE-2024-47611 by excluding liblzma evidence | 23-September-26 |
August 2026
| Inaccuracy report ID | Description | Fix date |
@@ -68,6 +68,53 @@ The tables may also include updates based on vulnerability support queries or in
The following tables present the relevant vulnerability assessment information organized by month.
+## October 2026
+
+| Inaccuracy report ID | Description | Fix date |
+| --- | --- | --- |
+| - | Added accurate EOS details for Python | 03-October-26 |
+| 145601 | Improved detection logic for Debian Cryptsetup | 04-October-26 |
+| 148656 | Improved detection logic for Red hat Kernel-uek-virt | 04-October-26 |
+| 149969 | Improved accuracy for Microsoft Remote Desktop Client | 04-October-26 |
+| 150741 | Improved detection logic for MOBOTIX MxControlCenter | 04-October-26 |
+| 148797 | Improved detection logic for Bitdefender Internet Security by excluding invalid path- "wsccommunicator.exe" | 04-October-26 |
+| 150595 | Improved detection logic for WinSCP by excluding invalid path- "setup.exe" | 04-October-26 |
+| 149860 | Improved accuracy for Postman by adding 1.0 as invalid version | 04-October-26 |
+| 152246 | Fixed incorrect recommendations in Sonicwall NetExtender Vulnerabilities - CVE-2026-66152, CVE-2026-66153 | 04-October-26 |
+| - | Fixed incorrect recommendations in Gimp Vulnerabilities - CVE-2026-59089, CVE-2026-59091, CVE-2026-66757 | 04-October-26 |
+| - | Fixed incorrect recommendations in Zscaler Client connecter Vulnerability - CVE-2026-25687 | 04-October-26 |
+| - | Improved detection logic for Office by correlating Office SAC audience aliases | 04-October-26 |
+| 154833 | Improved detection logic for Debian Aom | 04-October-26 |
+| 152058 | Added MDVM support for Intel Endpoint Management Assistant | 08-October-26 |
+| - | Added MDVM support for Microsoft App Installer | 08-October-26 |
+| - | Added MDVM support for Microsoft Raw Image Extensions | 08-October-26 |
+| - | Added MDVM support for Microsoft Webp Image Extension | 08-October-26 |
+| - | Added MDVM support for Microsoft HEIF image extension | 08-October-26 |
+| - | Added MDVM support for Microsoft Web media extension | 08-October-26 |
+| - | Fixed incorrect detections in DeepSeek | 08-October-26 |
+| 153571 | Fixed incorrect RustDesk detections under HashiCorp Terraform | 08-October-26 |
+| 153374 | Fixed incorrect MacPass detections under Keepassxc | 08-October-26 |
+| 154932 | Fixed incorrect ShareX detections under Techsmith Snagit | 08-October-26 |
+| 154333 | Fixed incorrect Learning Tools for OneNote detections under Microsoft OneNote | 08-October-26 |
+| 155205 | Fixed incorrect Atera agents detections under Zoom Meetings | 08-October-26 |
+| 150587 | Improved detection logic for Veeam one | 09-October-26 |
+| 152146 | Fixed incorrect recommendations for Vulnerability - CVE-2026-70466 by excluding FortiOS CPE | 09-October-26 |
+| 154594 | Fixed incorrect recommendations for Vulnerability - CVE-2014-0242 by excluding Apache HTTP Server CPE | 09-October-26 |
+| 150245 | Fixed incorrect recommendations for Vulnerability - CVE-2021-44228 by excluding oracle weblogic server CPE | 09-October-26 |
+| 152671 | Fixed incorrect recommendations in JMESPath (PHP) Vulnerability - CVE-2026-54133 | 09-October-26 |
+| 153056 | Fixed incorrect recommendations for Vulnerability - CVE-2017-15097 by excluding PostgreSQL CPE | 09-October-26 |
+| 152913 | Fixed incorrect recommendations for Hashi Corp Vulnerability - CVE-2022-42717 | 09-October-26 |
+
+## September 2026
+
+| Inaccuracy report ID | Description | Fix date |
+| --- | --- | --- |
+| 152264 | Fixed incorrect detections in Apple iMovie | 07-September-26 |
+| 152487 | Fixed incorrect detections in Google Earth | 07-September-26 |
+| 152303 | Added MDVM support for FastTrack Admin By Request | 07-September-26 |
+| - | Improved version detection logic for Teams for Android | 12-September-26 |
+| - | Fixed incorrect recommendations for Vulnerability - CVE-2024-47611 by excluding liblzma evidence | 23-September-26 |
+
## August 2026
| Inaccuracy report ID | Description | Fix date |