Nessus scan flagged out KB4025339: Windows 10 Version 1607 and Windows Server 2016 July 2017 Cumulative Update

Hello Janicecsy,

thank you for posting on the Microsoft Community Forums.

Since you're applying the latest cumulative patch every month, it's likely that the patch for that particular update is already included in the newer cumulative update. Here are the steps you can take to fix this:

1. Confirm the latest cumulative update:
   • Make sure that your system has applied the latest cumulative updates. On Windows 10, version 1607 and Windows Server 2016, you can check through "Windows Update".
   • Open Settings -> Update & Security -> Windows Update and tap Check for updates.
2. View the contents of the cumulative update: Review the release notes for the latest cumulative update that you have installed to confirm that it contains the KB4025339 fix. Microsoft typically lists all included fixes in its Knowledge Base articles and release notes.
3. Rescan: After you have confirmed that the latest cumulative update has been applied to your system, use Nessus to rescan your system to verify that the vulnerability still exists.
4. Contact Tenable Support: If Nessus is still reporting the vulnerability, contact Tenable's technical support team. They can help you determine if the scan engine needs to be updated or adjusted, or if there are false positives.

Best regards,

Lei