The simplistic answer is:
You don't have the required "Products" and "Classifications" checked in your WSUS server.
From WSUS's point of view - you have everything installed.
From Microsoft's point of view - you're missing updates because WSUS doesn't know of the product that requires the update.
You should be revisiting the Products and classifications list at least once a quarter, adding and removing products that are now in or removed from your environment.
https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-8-wsus-server-maintenance/