November 11, 2026

Windows 10 Defender Definitions Not Updating: Keeping Microsoft Defender’s Virus Database Current

Windows Security shows a warning that virus and threat definitions are out of date, or the “Last updated” date in Protection updates is days or weeks old. Selecting “Check for updates” spins briefly and fails, sometimes with an error code. When Windows 10 Defender definitions not updating leaves the database stale, Defender cannot recognise the newest threats.

Security intelligence updates, as Microsoft calls them, normally arrive several times a day through Windows Update. If Windows Update is broken, paused, or blocked, definitions stop as well. They also fail when another antivirus slot mahjong has switched Defender into passive mode, or when the Defender platform version itself is too old.

Network filters and metered connections can delay the downloads too.

Updating manually confirms whether Defender itself works, then you can fix the automatic path.

What Usually Triggers It

Definitions fail to update for these reasons:

• Windows Update is paused, broken, or set to defer updates.
• Third-party antivirus has put Defender into passive or disabled mode.
• The connection is marked as metered or blocks Microsoft update servers.
• The Defender platform or engine is outdated after missed updates.

If Windows Update itself shows errors, fix those first, since Defender depends on it.

The error code shown under Protection updates is a useful clue. Codes such as 0x80240438 or 0x80072ee2 usually point to a connection or proxy problem, while others suggest a damaged update service.

First Steps to Try

Update directly.

1. Open Windows Security > Virus & threat protection > Protection updates and select “Check for updates.”
2. Open Settings > Update & Security > Windows Update and resume updates if they are paused.
3. Turn off “Set as metered connection” for your network temporarily.
4. Restart the PC and check the Last updated date again.
5. If another antivirus is installed, check whether it is supposed to protect the PC instead.

If you use a proxy server or a filtering router at home, make sure it allows access to Microsoft’s update addresses. Some parental control filters block them by mistake.

If the Problem Continues

Reset the definitions.

1. Open Command Prompt as administrator.
2. Type “%ProgramFiles%\Windows Defender\MpCmdRun.exe” -RemoveDefinitions -DynamicSignatures and press Enter.
3. Type “%ProgramFiles%\Windows Defender\MpCmdRun.exe” -SignatureUpdate and press Enter.
4. If that fails, download the latest definition package for your system from Microsoft’s Security Intelligence updates page and run it.
5. Install any pending Windows Update items, including updates for the Defender platform.

You can check the current versions in Windows Security > Settings > About. The engine, platform, and security intelligence versions shown there should change after a successful update.

Protect Your Data First

Stay cautious while definitions are outdated: avoid unknown downloads and email attachments. Only download definition packages from Microsoft’s own website.

The Bottom Line

Defender definitions stop updating when Windows Update or Defender’s mode blocks them. Resume updates, remove metered limits, reset definitions with MpCmdRun, and install the latest package manually if needed.