I have just installed a new application on end user devices and this is showing that some devices still have serious vulnerabilities despite EndPoint Central saying they are Healthy.

How does EndPoint Central not pick that a version of iTunes has 13 CVE vulnerabilities?