Report\query to classify by most recent Windows Monthly Update installed


Is it possible to create a query to report on the most recent monthly Windows Update installed on a device? All devices missing the latest patch will require it, regardless of the last time they were patched, and using the minimum published date of a vuln that starts ‘Microsoft CVE-20’ seems a bit bodgy.


I’ve done a bit of a bodge on this - I’ve counted the number of vulnerabilities on each system with the title Microsoft CVE-20%, and then compared that with the the number of vulns reported on to get a rough idea of the vulns per month, and then work it out from there. Seems to be a reasonably accurate method.