Erin discusses that the "SQL Server Vulnerability Assessment in SSMS does not consume findings from Defender for Cloud" here.

You can also scan for vulnerabilities with PowerShell.