Ability to easily list computers not patched against a specific CVE
Say you want to list computers not patched against CVE-2019-0708 (https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708). 2 problems here :
- Depending of the OS version, the KB number is not the same. -A KB number is quickly superseded and depending of the supersedence behavior, it becomes unknown from SCCM.
It could be great if for each computer a mecanism could determine which KB is needed, if it (or a superseding KB) has been applied and produce a report.