Update scan reports not installed when scanned via COM api despite update is installed `Update for Windows Security platform - KB5007651 (Version 10.0.29628.1000) `

Yuvraj Garhwal 0 Reputation points
2026-09-10T05:54:32.1466667+00:00

On device update with title Update for Windows Security platform - KB5007651 (Version 10.0.29628.1000) is installed but when scanned for updates using script below same update appears again with same update id, revision and kb id. Update is not visible in Windows Update UI and update history also shows update as installed but COM Api returns same updates when queried for not installed updates.

Can someone help to understand why is there such discrepancy ? is this expected ?

Device is using Windows 11 Pro, version: 10.0.26200

$session  = New-Object -ComObject Microsoft.Update.Session
$searcher = $session.CreateUpdateSearcher()
$result   = $searcher.Search("IsInstalled=0")

$result.Updates | ForEach-Object {
    [PSCustomObject]@{
        Title          = $_.Title
        KB             = ($_.KBArticleIDs -join ",")
        UpdateID       = $_.Identity.UpdateID
        RevisionNumber = $_.Identity.RevisionNumber
        IsDownloaded   = $_.IsDownloaded
        IsHidden       = $_.IsHidden
        MsrcSeverity   = $_.MsrcSeverity
    }
} | Format-Table -AutoSize

Windows for business | Windows Client for IT Pros | Devices and deployment | Install Windows updates, features, or roles

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.