You are informed of a new common vulnerabilities and exposures (CVE) vulnerability that affects your...

From Vulnerability Management, select Weaknesses, and search for and select the CVE.

Select Go to related security recommendations.

Create the remediation request.

According to Microsoft Defender Vulnerability Management documentation, the correct workflow for responding to a new CVE in your organization—especially when there is an active exploit—is to begin your investigation within the Vulnerability Management section of the Microsoft Defender portal.

From Vulnerability Management, select Weaknesses –Microsoft explains that all known CVEs are listed under Weaknesses in the Defender portal. You search by CVE ID (for example, CVE-2024-xxxx) to view its details, exploitability data, and the devices affected.

Select Go to related security recommendations –After opening the CVE details, the portal shows associated security recommendations that describe how to remediate the issue (such as updating software, removing an at-risk version, or applying a patch). Selecting Go to related security recommendations links the CVE directly to actionable remediation guidance.

Create the remediation request –Finally, Microsoft Defender for Endpoint allows security teams to formally request remediation from IT administrators or system owners. You can create a remediation request directly from the recommendation page, assigning it to the responsible group and specifying a due date.

This sequence aligns with Microsoft’s recommended remediation workflow for CVEs as described in Defender Vulnerability Management documentation and ensures that remediation actions are tracked and executed efficiently through the portal.

✅ Therefore, the correct order is:

(1) From Vulnerability Management → Weaknesses → search CVE → (2) Go to related security recommendations → (3) Create remediation request.