Exchange 2016 CU23 build number issue

Question

We are running Exchange server 2016 CU23 in a hybrid environment, single Exchange server running the transport role, no mailboxes stored on there, current build in 2507.006.
I need to get the build number to be at least 2507.009 to meet a requirement from our cyber security insurance.
I downloaded KB5014261 from Microsoft and followed the instructions to install it, which should raise the build level to 2507.009. From an elevated command prompt I ran the installer, it popped up an install wizard, which said it was installing KB5015322, not the patch I had downloaded. On checking, this raises the build to 2507.012 which exceeds the minimum requirement so I let it install.

Now, the Exchange admin console still shows build 2507.6, the registry has some entries showing 2507.12 and others showing 2507.6.
I decided to download the actual KB5015322 and installed that to see if it would correct this, it did not, EAC still says 2507.6, the registry says a mixture of 2507.6 and 2507.12.

How can I resolve this? The value shown by EAC is the one being used as our reading so I need to get this to shwo the correct level as per the patch/update installed.

Answer 1

The admin console wont show a security update build.
You have to use one of the first two methods here:
https://learn.microsoft.com/en-us/exchange/new-features/build-numbers-and-release-dates?view=exchserver-2019#view-the-build-number-of-an-exchange-based-server