Hotfixes

Commands

systeminfo	Extensive system info
Get-HotFix	All installed Microsoft Hotfixes
(get-hotfix).count	Get a count of HotFixes
wmic qfe list	Lists installed Windows hotfixes using WMIC.
wmic qfe get hotfixid	Get a list of HotFixes
dism /online /get-packages	Lists packages, including hotfixes, using DISM.
Get-WmiObject -Class Win32_QuickFixEngineering	Hotfixes via WMI

Find Specific Hotfix

systeminfo | find "KBxxxxxx"	Specific KB
wmic qfe | find "KB<number>"	Specific KB
wmic qfe get HotFixID | find "KBxxxxxx"	Specific KB
regfind -b "KB<number>"	Specific KB
Get-HotFix -Id "KBxxxxxx"	Specific KB
dism /online /get-packages | findstr "KBxxxxxx"	Specific KB

PowerShell command to find a hotfix via WMI filtering.

Get-WmiObject -query 'select * from win32_quickfixengineering' | foreach {$_.KB<number>}

Get-WmiObject -Class Win32_QuickFixEngineering | Where-Object {$_.HotFixID -eq "KBxxxxxx"}

Registry Locations

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages

This registry key contains information about updates and hotfixes that have been installed by the Component-Based Servicing (CBS).

Each subkey represents a different package or hotfix.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Within this key, there are subkeys for installed programs and updates, including hotfixes.

Hotfixes are typically identified by their KB number (e.g., KBxxxxxxx).

Each subkey contains information about the specific hotfix, such as its display name, installation date, and version.

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall

On 64-bit versions of Windows, this registry path mirrors the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall path and contains information about 32-bit programs and updates installed on the system, including 32-bit hotfixes.