In some cases, Microsoft Defender will report vulnerable software in your organization but the device(s) are patched - so why is it reporting as vulnerable? Certain software gets installed in user context or forget to remove older installations - such as Microsoft Teams. Microsoft Teams, Google Chrome and others