Vulnerability scans

How does Defender do vulnerability scans? Is it connected to a database like WPScan Vulnerability Database?