Microsoft Store applications (Preview)

What changed

Defender Vulnerability Management now identifies vulnerabilities in Microsoft Store applications and marks the related CVE evidence with a Microsoft Store tag, including the affected application, version and file location.

Why it matters

Store-delivered applications can otherwise be missed in software-inventory remediation workflows, so the reported application identity, vulnerable version and available Store update must be validated together.

Known limitations

• Availability, prerequisites and rollout scope remain authoritative in the linked Microsoft documentation.

Now check

• Confirm that Microsoft Store applications appear in Defender Vulnerability Management software inventory
• Open representative CVE evidence and verify the Microsoft Store tag, vulnerable version and file location
• Update the affected application through Microsoft Store management and confirm that exposure and recommendation status clear after inventory refresh