Ensure that Patch Management targets the client in the Compliance Reports as outlined in KM: HOWTO21677, for if the updates are not listed Applicable & Vulnerable via these reports, they will not target.
Often the Windows System Assessment Scan runs without fail, but another process in the workflow is failing to perform. The client sends Patch Inventories to the SMP, and those are processed to the Database. It is by that Client's Patch Inventories being cross referenced to the Rule Logic provided by the PMImport, that the Intersect Filters are populated for IsApplicable=TRUE.
You may review the Patch Filter (Intersect Filter) targets by importing the SSE Report Pack from KM: HOWTO52986 - SSE Reports > Solutions > Patch Management > Patch Filters, and right-click the update in questions to 'Open in new window' and see what that update targets in the environment.
You may also review KM: HOWTO60750 if you feel there are some issues with Patch Inventories returning to the SMP.
Hope this helps,
Joshua