Application Updates¶
Every installed program is more code with its own bugs. Browsers, PDF readers, archive tools, media players, and text editors are the common targets because everyone has them and they open files from the internet.
Find what's installed and how old it is¶
Settings → Apps → Installed apps shows names and versions. PowerShell:
Get-Package | Select Name, Version | Sort Name
For a specific program, the executable's own version is authoritative:
(Get-Item "C:\Program Files\Notepad++\notepad++.exe").VersionInfo | Select FileVersion, ProductVersion
Compare to the current release on the vendor's site. One major version behind is a finding. Several behind is a machine nobody has touched in years.
Update them¶
Most programs have it in their own menu:
| Program | Where |
|---|---|
| Chrome | Three-dot menu → Help → About Google Chrome. Checks and installs on the spot. |
| Firefox | Hamburger menu → Help → About Firefox |
| Edge | Three-dot menu → Help and feedback → About Microsoft Edge |
| Notepad++ | ? → Update Notepad++ |
| 7-Zip, VLC, most others | Help → Check for updates, or download the new installer from the vendor |
winget updates many programs at once if it's present (it is on Windows 11):
winget upgrade
winget upgrade --all
After updating¶
Some updaters install to a new folder and leave the old version behind. Check Installed apps for two entries with the same name and remove the old one. Confirm the version number changed.
Keep them updating¶
Turn on automatic update checking wherever a program offers it. Firefox in particular can be locked down with a file that silently disables update checks; see Firefox.
Example¶
Get-Package shows Mozilla Firefox 102.0. Current Firefox is well past 130. Open About Firefox; it says "Firefox is up to date," which is impossible. That's the mozilla.cfg lockdown. Fix that first, then update.