# KB4601315: February 2021 cumulative update for Windows 10 1909

KB4601315, released February 9, 2021, fixes 28 CVEs across 4 products. 2 of them are being exploited (CVE-2020-1472); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/microsoft/kb4601315
- Platform: Microsoft
- Released: Feb 9, 2021
- Priority: Patch now (Closes CVE-2020-1472, exploited (CISA KEV, ransomware))
- CVEs: 28, exploited: 2, on CISA KEV: 2
- Vendor advisory: https://support.microsoft.com/help/4601315

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Windows 10 Version 1909 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1909-for-32-bit-systems.md) |  | 18363.1377 |
| [Windows 10 Version 1909 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1909-for-arm64-based-systems.md) |  | 18363.1377 |
| [Windows 10 Version 1909 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1909-for-x64-based-systems.md) |  | 18363.1377 |
| [Windows Server, version 1909 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-version-1909-server-core-installation.md) |  | 18363.1377 |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2020-1472](https://patchblox.com/security/data/cve/CVE-2020-1472.md) | Patch now | Windows Netlogon | 10.0 | 0.9939 | CISA KEV, Ransomware |
| [CVE-2021-1732](https://patchblox.com/security/data/cve/CVE-2021-1732.md) | Patch now | Windows Kernel | 7.8 | 0.7838 | CISA KEV, Ransomware |
| [CVE-2021-24086](https://patchblox.com/security/data/cve/CVE-2021-24086.md) | Urgent | Windows TCP/IP | 7.5 | 0.5896 | More likely |
| [CVE-2021-24093](https://patchblox.com/security/data/cve/CVE-2021-24093.md) | Urgent | Microsoft Graphics Component | 8.8 | 0.4590 |  |
| [CVE-2021-24074](https://patchblox.com/security/data/cve/CVE-2021-24074.md) | Urgent | Windows TCP/IP | 9.8 | 0.2616 | More likely |
| [CVE-2021-24094](https://patchblox.com/security/data/cve/CVE-2021-24094.md) | Urgent | Windows TCP/IP | 9.8 | 0.2214 | More likely |
| [CVE-2021-24078](https://patchblox.com/security/data/cve/CVE-2021-24078.md) | Urgent | Role: DNS Server | 9.8 | 0.1189 | More likely |
| [CVE-2021-24091](https://patchblox.com/security/data/cve/CVE-2021-24091.md) | Urgent | Microsoft Windows Codecs Library | 7.8 | 0.0338 |  |
| [CVE-2021-24077](https://patchblox.com/security/data/cve/CVE-2021-24077.md) | Urgent | Role: Windows Fax Service | 9.8 | 0.0287 |  |
| [CVE-2021-24081](https://patchblox.com/security/data/cve/CVE-2021-24081.md) | Urgent | Microsoft Windows Codecs Library | 7.8 | 0.0251 |  |
| [CVE-2021-1722](https://patchblox.com/security/data/cve/CVE-2021-1722.md) | Urgent | Role: Windows Fax Service | 8.1 | 0.0244 |  |
| [CVE-2021-24088](https://patchblox.com/security/data/cve/CVE-2021-24088.md) | Urgent | Windows Print Spooler Components | 8.8 | 0.0243 |  |
| [CVE-2021-1727](https://patchblox.com/security/data/cve/CVE-2021-1727.md) | Urgent | Windows Installer | 7.8 | 0.0076 | Disclosed |
| [CVE-2021-1698](https://patchblox.com/security/data/cve/CVE-2021-1698.md) | Urgent | Windows Kernel | 7.8 | 0.0066 | More likely |
| [CVE-2021-1692](https://patchblox.com/security/data/cve/CVE-2021-1692.md) | High | Windows Hyper-V | 7.7 | 0.0424 |  |
| [CVE-2021-1734](https://patchblox.com/security/data/cve/CVE-2021-1734.md) | High | Windows Remote Procedure Call | 7.5 | 0.0381 |  |
| [CVE-2021-24083](https://patchblox.com/security/data/cve/CVE-2021-24083.md) | High | Windows Address Book | 7.8 | 0.0287 |  |
| [CVE-2021-24103](https://patchblox.com/security/data/cve/CVE-2021-24103.md) | High | Windows Event Tracing | 7.8 | 0.0063 |  |
| [CVE-2021-25195](https://patchblox.com/security/data/cve/CVE-2021-25195.md) | High | Windows PKU2U | 7.8 | 0.0063 |  |
| [CVE-2021-24102](https://patchblox.com/security/data/cve/CVE-2021-24102.md) | High | Windows Event Tracing | 7.8 | 0.0055 |  |
| [CVE-2021-24080](https://patchblox.com/security/data/cve/CVE-2021-24080.md) | Routine | Windows Trust Verification API | 6.5 | 0.0305 |  |
| [CVE-2021-24084](https://patchblox.com/security/data/cve/CVE-2021-24084.md) | Routine | Windows Mobile Device Management | 5.5 | 0.0275 |  |
| [CVE-2021-24082](https://patchblox.com/security/data/cve/CVE-2021-24082.md) | Routine | Windows PowerShell | 4.3 | 0.0263 |  |
| [CVE-2021-24098](https://patchblox.com/security/data/cve/CVE-2021-24098.md) | Routine | Windows Console Driver | 5.5 | 0.0152 | Disclosed |
| [CVE-2021-24076](https://patchblox.com/security/data/cve/CVE-2021-24076.md) | Routine | Role: Windows Hyper-V | 5.5 | 0.0095 |  |
| [CVE-2021-24079](https://patchblox.com/security/data/cve/CVE-2021-24079.md) | Routine | Windows Backup Engine | 5.5 | 0.0095 |  |
| [CVE-2021-24106](https://patchblox.com/security/data/cve/CVE-2021-24106.md) | Routine | Windows DirectX | 5.5 | 0.0095 | Disclosed |
| [CVE-2021-1731](https://patchblox.com/security/data/cve/CVE-2021-1731.md) | Routine | Windows PFX Encryption | 5.5 | 0.0088 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
