You need to ensure that the WSUS client computers install the critical update during the next detection interval
You need to configure all WSUS client computers to download approved updates directly from the Microsoft Update servers