False positive for Microsoft Windows Multiple Vulnerabilities (KB4515384)

Vulnerability Tests
1

Hi there, ran a scan on a windows 1909 machine with the most up to date patches and one of the results that came back was “Microsoft Windows Multiple Vulnerabilities (KB4515384)” which is for the 1903 build

Detection Result
Vulnerable range: 10.0.18362.0 - 10.0.18362.355
File checked: C:\Windows\system32\Gdiplus.dll
File version: 10.0.18362.295

Checking on the machine and also via sccm the machine is reporting to have 10.0.18363.476 so has a completely different build number. is this a case that this file is also vulnerable in this build number or is this a false positive?

1 Like
2

Hi and thanks for your report.

An update to this VT was already done this morning and should arrive in the feed tomorrow or the day after.

1 Like
3

Many thanks

1 Like