-d argument always get only 1 missing patches

[hasamba]

Running Wes-ng on my virtual lab, on win10 1809 (latest hotfix is from 2019), server 2016, server 2019 always returning only 1 missing patch on each which does not seems correct

wes_srv19_with_d.txt wes_srv19_without_d.txt wes_srv16_with_d.txt wes_srv16_without_d.txt wes_win101809_without_d.txt wes_win101809_with_d.txt

[bitsadmin]

Thanks hasamba for your detailed bug report!

For now as a workaround you can use the missingkbs.vbs script to identify potential exploitable vulnerabilities using wes.py's -m parameter.

More details in the missingkbs.vbs section of this blog post: https://blog.bitsadmin.com/blog/windows-security-updates-for-hackers#missingkbsvbs

[WHATSUPTOYOU]

It's seems like the "get_most_recent_kb" function returns the most recent date of all found KBs, but not the installed patches?