Duplicate cumulative kb, Windows 11 update returns false information

Simon Fonteneau 85 Reputation points
2025-02-13T11:22:44.96+00:00

I use the windows update api to check which cabs are installed on the machine:

https://learn.microsoft.com/en-us/windows/win32/wua_sdk/using-the-windows-update-agent-api

On Windows 11 the scan sends incorrect information and duplicate cabs.

What I was able to observe is that for a 24h2, the API also sees the cumulative updates of the 23h3 and the 22h2 (the cab numbers are indicated but not their update id.).

In addition, the API indicates that the cab is installed, which is false since it has just been detected.
Is the 24h2 cab considered not installed. Which is true

Looks like there is a detectoid problem.

This is problematic because if we base ourselves on the kbids, Windows makes us believe that the cab is properly installed... Finally we have two contradictory results.

Windows for business | Windows Client for IT Pros | User experience | Other

6 answers

Sort by: Most helpful
  1. Simon Fonteneau 85 Reputation points
    2026-09-15T12:11:22.4966667+00:00

    At this point, Microsoft appears perfectly happy to leave this bug unfixed and let everyone else clean up the mess.

    So yes: we now have to parse update titles, detect the Windows version ourselves, and filter bogus results returned by the official Windows Update API.

    Quite impressive for an API whose entire job is to tell us which updates actually apply.

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.