I am getting a kerberos vulnerability on security scans

Question

I am getting this hit on security scans(see below) on only 1 of 3 DC's that are all 2016. I have checked that all updates are applied and tried to apply KB5019966 manually, which results in a message that the update isn't needed(can get exact error if needed). In all my research I conclude that if updates are current then this is a false positive, can someone confirm those findings?

"The remote Windows host is missing security update 5019966. It is, therefore, affected by a Windows Kerberos Elevation of Privilege Vulnerability (CVE-2022-37967)"

Answer 1

KB5019966 is the November 8, 2022-(OS Build 17763.3650) cumulative update. You can check the current build by running winver. If you find equal or a higher build number then you can safely ignore since the updates provided within KB5019966 are included in all later cumulative updates.

--please don't forget to close up the thread here by marking answer if the reply is helpful--