Why is there a policy for updates?

I just did a fresh install of windows 2022 server eval.

Wazuh is reporting that the server is vulnerable to CVE-2022-41113.

This apparently should be fixed with update KB5022303.

When I check for updates, it says that there are no updates and everything

is already up to date.

On the update catalog, I cannot find KB5022303 for windows server 2022. I tried

the windows 10 update, but it didn't work. It just said invalid version.

Looking at updates again, there is apparently a policy or something configured for

windows update even though there is not. I would assume if that policy went away

I would get KB5022303?

Here are a couple of screenshots: