# KB5007189: November 2021 cumulative update for Windows 10 1909 KB5007189, released November 9, 2021, fixes 23 CVEs across 6 products. One of them is being exploited (CVE-2021-41379); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5007189 - Platform: Microsoft - Released: Nov 9, 2021 - Priority: Patch now (Closes CVE-2021-41379, exploited (CISA KEV, ransomware)) - CVEs: 23, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://support.microsoft.com/help/5007189 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1909 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/microsoft-edge-chromium-based-in-ie-mode-on-windows-10-version-1909-for-32-bit-systems.md) | | 18363.1916 | | [Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1909 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-edge-chromium-based-in-ie-mode-on-windows-10-version-1909-for-arm64-based-systems.md) | | 18363.1916 | | [Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1909 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-edge-chromium-based-in-ie-mode-on-windows-10-version-1909-for-x64-based-systems.md) | | 18363.1916 | | [Windows 10 Version 1909 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1909-for-32-bit-systems.md) | | 18363.1916 | | [Windows 10 Version 1909 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1909-for-arm64-based-systems.md) | | 18363.1916 | | [Windows 10 Version 1909 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1909-for-x64-based-systems.md) | | 18363.1916 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2021-41379](https://patchblox.com/security/data/cve/CVE-2021-41379.md) | Patch now | Windows Installer | 5.5 | 0.1945 | CISA KEV, Ransomware | | [CVE-2021-38666](https://patchblox.com/security/data/cve/CVE-2021-38666.md) | Urgent | Windows RDP | 8.8 | 0.1518 | More likely | | [CVE-2021-41356](https://patchblox.com/security/data/cve/CVE-2021-41356.md) | Urgent | Microsoft Windows | 7.5 | 0.0302 | More likely | | [CVE-2021-42279](https://patchblox.com/security/data/cve/CVE-2021-42279.md) | Urgent | Windows Scripting | 4.2 | 0.0232 | | | [CVE-2021-26443](https://patchblox.com/security/data/cve/CVE-2021-26443.md) | Urgent | Windows Virtual Machine Bus | 9.0 | 0.0170 | | | [CVE-2021-38665](https://patchblox.com/security/data/cve/CVE-2021-38665.md) | High | Windows RDP | 7.4 | 0.0702 | | | [CVE-2021-42276](https://patchblox.com/security/data/cve/CVE-2021-42276.md) | High | Microsoft Windows Codecs Library | 7.8 | 0.0249 | | | [CVE-2021-42275](https://patchblox.com/security/data/cve/CVE-2021-42275.md) | High | Windows COM | 8.8 | 0.0210 | | | [CVE-2021-41378](https://patchblox.com/security/data/cve/CVE-2021-41378.md) | High | Windows NTFS | 7.8 | 0.0157 | | | [CVE-2021-42285](https://patchblox.com/security/data/cve/CVE-2021-42285.md) | High | Windows Kernel | 7.8 | 0.0055 | | | [CVE-2021-42283](https://patchblox.com/security/data/cve/CVE-2021-42283.md) | High | Windows NTFS | 8.8 | 0.0049 | | | [CVE-2021-36957](https://patchblox.com/security/data/cve/CVE-2021-36957.md) | High | Windows Desktop Bridge | 7.8 | 0.0049 | | | [CVE-2021-41366](https://patchblox.com/security/data/cve/CVE-2021-41366.md) | High | Windows Cred SSProvider Protocol | 7.8 | 0.0049 | | | [CVE-2021-41367](https://patchblox.com/security/data/cve/CVE-2021-41367.md) | High | Windows NTFS | 7.8 | 0.0049 | | | [CVE-2021-41370](https://patchblox.com/security/data/cve/CVE-2021-41370.md) | High | Windows NTFS | 7.8 | 0.0049 | | | [CVE-2021-41377](https://patchblox.com/security/data/cve/CVE-2021-41377.md) | High | Windows Fast FAT Driver | 7.8 | 0.0049 | | | [CVE-2021-41351](https://patchblox.com/security/data/cve/CVE-2021-41351.md) | Routine | Microsoft Edge (Chromium-based) in IE Mode | 4.3 | 0.0391 | | | [CVE-2021-42284](https://patchblox.com/security/data/cve/CVE-2021-42284.md) | Routine | Role: Windows Hyper-V | 6.8 | 0.0376 | | | [CVE-2021-38631](https://patchblox.com/security/data/cve/CVE-2021-38631.md) | Routine | Windows RDP | 4.4 | 0.0188 | Disclosed | | [CVE-2021-41371](https://patchblox.com/security/data/cve/CVE-2021-41371.md) | Routine | Windows RDP | 4.4 | 0.0165 | Disclosed | | [CVE-2021-42280](https://patchblox.com/security/data/cve/CVE-2021-42280.md) | Routine | Windows Feedback Hub | 5.5 | 0.0096 | | | [CVE-2021-42277](https://patchblox.com/security/data/cve/CVE-2021-42277.md) | Routine | Windows Diagnostic Hub | 5.5 | 0.0087 | | | [CVE-2021-42288](https://patchblox.com/security/data/cve/CVE-2021-42288.md) | Routine | Windows Hello | 5.7 | 0.0071 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo