Older versions of Teams are still appearing as vulnerabilities in Microsoft Defender
Hello,
I have encountered an issue where older versions of Microsoft Teams are still present in the registry for a specific user profile and are being flagged as vulnerable by Microsoft Defender. Specifically, the vulnerabilities are noted in the HKEY_USERS registry path.
In Microsoft Defender, the evidence of this issue appears on the inventory page, with the software identified as Teams. The software evidence indicates its presence in both the registry and the file path: C:Users<username>AppDataLocalMicrosoftTeamscurrentTeams.exe.
I have deleted the file from C:Users<username>AppDataLocalMicrosoftTeamscurrentTeams.exe, so it no longer appears as vulnerable in Defender. However, I am unable to remove the associated registry entries because they don’t exist in the specified path. The information in Defender is as follows:
Where we detected this software:
Registry paths:
HKEY_USERSusernameSOFTWAREMicrosoftWindowsCurrentVersionUninstallTeams
I would appreciate your guidance on the best practices for detecting and removing residual Microsoft Teams entries in the registry for specific user profiles.
Thank you for your assistance.
Hello,I have encountered an issue where older versions of Microsoft Teams are still present in the registry for a specific user profile and are being flagged as vulnerable by Microsoft Defender. Specifically, the vulnerabilities are noted in the HKEY_USERS registry path. In Microsoft Defender, the evidence of this issue appears on the inventory page, with the software identified as Teams. The software evidence indicates its presence in both the registry and the file path: C:Users<username>AppDataLocalMicrosoftTeamscurrentTeams.exe. I have deleted the file from C:Users<username>AppDataLocalMicrosoftTeamscurrentTeams.exe, so it no longer appears as vulnerable in Defender. However, I am unable to remove the associated registry entries because they don’t exist in the specified path. The information in Defender is as follows:Where we detected this software:Registry paths:HKEY_USERSusernameSOFTWAREMicrosoftWindowsCurrentVersionUninstallTeams I would appreciate your guidance on the best practices for detecting and removing residual Microsoft Teams entries in the registry for specific user profiles. Thank you for your assistance. Read More
