Probably been done before, but here's what I did...
I made a shortcut to Windows Update on the root of my C: drive (dunno if CF can browse the Control Panel), added 'External' app to General options, gave it the window name (Windows Update) and viola! One button update check for the OS!
Here's a screenshot of the button...
And the app in the CF window...
