Can you confirm if the date shown by Windows Updates (in Windows) and the last patch date within Endpoint Central are the same date.  We can see devices that report only a few patches required but the last update date in Windows is a few months ago.