MSRC-Microsoft-Security-Updates-API
MSRC-Microsoft-Security-Updates-API copied to clipboard
Not reporting all CVEs
Several CVEs are not returned when queried. Why won't the API return the information? It is available via the Microsoft Security Catalog.
Go to https://msrc.microsoft.com/update-guide/vulnerability Select 2016 as the date range Click Vulnerabilities tab and sort by CVE No CVE-2016-0099
https://www.cve.org/CVERecord?id=CVE-2016-0099 Links to https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-032 Microsoft Security Catalog: https://www.catalog.update.microsoft.com/Search.aspx?q=ms16-032
Same result using PowerShell: Get-MsrcSecurityUpdate -Vulnerability CVE-2016-0099 Get-MsrcSecurityUpdate : HTTP Get failed with status code NotFound: Not Found
Other examples:
CVE-2014-1812 - KB2928120 NIST - https://nvd.nist.gov/vuln/detail/CVE-2014-1812 Microsoft Security Bulletin MS14-025 - Important | Microsoft Learn: https:/learn.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-025 Microsoft Security Catalog: https://www.catalog.update.microsoft.com/Search.aspx?q=ms14-025
CVE-2015-2426 - KB3079904 Microsoft Security Bulletin MS15-078 https://www.catalog.update.microsoft.com/Search.aspx?q=ms15-078
CVE-2015-2387 - KB3077657 Microsoft Security Bulletin MS15-077 ...
CVE-2015-1635 - KB3042553 Microsoft Security Bulletin MS15-034 ...
CVE-2014-6324 – KB3011780 Microsoft Security Bulletin MS14-068 ...
CVE-2014-6352 - KB3010788 Microsoft Security Bulletin MS14-064 ...