Forum Discussion
Microsoft Windows Codecs Library Vulnerability showing up on scan, even after updating the apps.
Did you ever find a fix for this? We have the same issue and even removed the old version only to find out it still shows as vulnerable. It might be picking it up in user profiles which makes it more difficult to remove.
Kurt Carpenter Ditto. Looks like a reference to the old version is lingering in wmi, which is our problem since the detection logic in our case is querying wmi. I'm waiting on a fix from MS. More broadly, we can't update raw image file, VP9, HEIF, extensions... since we don't use MS Store.
- QulaysUserDec 31, 2023Copper Contributor
arneb3 did you ever get a solution to this? Our Qualys scans are still bringing up Windows Store Apps (eg codecs) that we can't update. Is there a way to remove them from WMI?
- arneb3Jan 13, 2024Copper Contributor
QulaysUser In addition to pushing latest versions via sccm, we had to deploy a removal package via sccm (powershell scripted repeating loops because multiple old versions on some machines). It was painstaking...