First published on TECHNET on Dec 19, 2017
Beginning in Insider Build
17063,
we’re introducing two command-line tools to the Windows toolchain: curl and bsdtar. It’s ...
Published Mar 22, 2019
Version 1.0
Blog Post
As of Aug 21, 2020, my Windows 10 v1809 is showing the curl.exe in System32 and SysWOW64 as version 7.55.1 but the current version is 7.72.0 where many of the updates since v7.55.1 have been fixes for security vulnerabilities.
What gives Microsoft? As another commenter pointed out, if you are going to include it then WSUS and/or Microsoft Updates _needs_ to keep it current.
I'll also point out that you've made it difficult to update or remove the Microsoft provided curl manually since ICALCS shows the owner with FULL permissions to be NT SERVICE\TrustedInstaller with every other defined user as only having Read, Execute.
Installing Git for Windows also includes curl but at least those folks are pretty good about keeping curl current. Unfortunately many people will have a path configuration that will use your obsolete, built-in instance.
Not cool, Microsoft! Not cool at all.