Repeated KB2267602 installations are normal because Microsoft Defender uses that same KB number for continually updated security intelligence, but repeatedly showing the exact same version—[IP Address]—should be checked against the version actually installed.
Check the installed version
- Open Windows Security.
- Select Virus & threat protection.
- Under Virus & threat protection updates, select Protection updates.
- Check Security intelligence version.
Alternatively, open PowerShell and run:
Get-MpComputerStatus |
Select-Object AntivirusSignatureVersion,
AntivirusSignatureLastUpdated
Microsoft documents AntivirusSignatureVersion as the value to compare with its current security-intelligence release.^1^
Interpret the result
- If the installed version is newer than [IP Address]: Defender is updating correctly. The repeated history entry does not mean Defender remains stuck on that version.
- If the entries have different version numbers: This is expected. KB2267602 remains the same while its security-intelligence version changes; updates can be released every few hours.^2^
- If the installed version remains [IP Address]: Select Check for updates on the Protection updates page. Defender normally obtains these updates automatically through Windows Update.^3^
As of November 10, 2026 at 5:40 PM, Microsoft’s release page lists [IP Address], which is newer than [IP Address].^4^ Because this value changes frequently, compare against the live page rather than treating [IP Address] as permanently current.
If a manual check still leaves Defender on an older version or produces an error, that—not multiple successful KB2267602 history entries—indicates an update problem requiring further troubleshooting.
References