# KB5007205: November 2021 cumulative update for Windows Server 2022

KB5007205, released November 9, 2021, fixes 26 CVEs across 2 products. 3 of them are being exploited (CVE-2021-42287); 3 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/microsoft/kb5007205
- Platform: Microsoft
- Released: Nov 9, 2021
- Priority: Patch now (Closes CVE-2021-42287, exploited (CISA KEV, ransomware))
- CVEs: 26, exploited: 3, on CISA KEV: 3
- Vendor advisory: https://support.microsoft.com/help/5007205

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Windows Server 2022](https://patchblox.com/security/data/product/microsoft/windows-server-2022.md) |  | 20348.350 |
| [Windows Server 2022 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2022-server-core-installation.md) |  | 20348.350 |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2021-42287](https://patchblox.com/security/data/cve/CVE-2021-42287.md) | Patch now | Windows Active Directory | 7.5 | 0.7717 | CISA KEV, Ransomware |
| [CVE-2021-42278](https://patchblox.com/security/data/cve/CVE-2021-42278.md) | Patch now | Windows Active Directory | 7.5 | 0.7330 | CISA KEV, Ransomware |
| [CVE-2021-41379](https://patchblox.com/security/data/cve/CVE-2021-41379.md) | Patch now | Windows Installer | 5.5 | 0.1945 | CISA KEV, Ransomware |
| [CVE-2021-38666](https://patchblox.com/security/data/cve/CVE-2021-38666.md) | Urgent | Windows RDP | 8.8 | 0.1518 | More likely |
| [CVE-2021-41356](https://patchblox.com/security/data/cve/CVE-2021-41356.md) | Urgent | Microsoft Windows | 7.5 | 0.0302 | More likely |
| [CVE-2021-42279](https://patchblox.com/security/data/cve/CVE-2021-42279.md) | Urgent | Windows Scripting | 4.2 | 0.0232 |  |
| [CVE-2021-26443](https://patchblox.com/security/data/cve/CVE-2021-26443.md) | Urgent | Windows Virtual Machine Bus | 9.0 | 0.0170 |  |
| [CVE-2021-38665](https://patchblox.com/security/data/cve/CVE-2021-38665.md) | High | Windows RDP | 7.4 | 0.0702 |  |
| [CVE-2021-42282](https://patchblox.com/security/data/cve/CVE-2021-42282.md) | High | Windows Active Directory | 7.5 | 0.0417 |  |
| [CVE-2021-42291](https://patchblox.com/security/data/cve/CVE-2021-42291.md) | High | Windows Active Directory | 7.5 | 0.0417 |  |
| [CVE-2021-42276](https://patchblox.com/security/data/cve/CVE-2021-42276.md) | High | Microsoft Windows Codecs Library | 7.8 | 0.0249 |  |
| [CVE-2021-42275](https://patchblox.com/security/data/cve/CVE-2021-42275.md) | High | Windows COM | 8.8 | 0.0210 |  |
| [CVE-2021-41378](https://patchblox.com/security/data/cve/CVE-2021-41378.md) | High | Windows NTFS | 7.8 | 0.0157 |  |
| [CVE-2021-42285](https://patchblox.com/security/data/cve/CVE-2021-42285.md) | High | Windows Kernel | 7.8 | 0.0055 |  |
| [CVE-2021-42283](https://patchblox.com/security/data/cve/CVE-2021-42283.md) | High | Windows NTFS | 8.8 | 0.0049 |  |
| [CVE-2021-36957](https://patchblox.com/security/data/cve/CVE-2021-36957.md) | High | Windows Desktop Bridge | 7.8 | 0.0049 |  |
| [CVE-2021-41366](https://patchblox.com/security/data/cve/CVE-2021-41366.md) | High | Windows Cred SSProvider Protocol | 7.8 | 0.0049 |  |
| [CVE-2021-41367](https://patchblox.com/security/data/cve/CVE-2021-41367.md) | High | Windows NTFS | 7.8 | 0.0049 |  |
| [CVE-2021-41370](https://patchblox.com/security/data/cve/CVE-2021-41370.md) | High | Windows NTFS | 7.8 | 0.0049 |  |
| [CVE-2021-41377](https://patchblox.com/security/data/cve/CVE-2021-41377.md) | High | Windows Fast FAT Driver | 7.8 | 0.0049 |  |
| [CVE-2021-42284](https://patchblox.com/security/data/cve/CVE-2021-42284.md) | Routine | Role: Windows Hyper-V | 6.8 | 0.0376 |  |
| [CVE-2021-38631](https://patchblox.com/security/data/cve/CVE-2021-38631.md) | Routine | Windows RDP | 4.4 | 0.0188 | Disclosed |
| [CVE-2021-41371](https://patchblox.com/security/data/cve/CVE-2021-41371.md) | Routine | Windows RDP | 4.4 | 0.0165 | Disclosed |
| [CVE-2021-42280](https://patchblox.com/security/data/cve/CVE-2021-42280.md) | Routine | Windows Feedback Hub | 5.5 | 0.0096 |  |
| [CVE-2021-42277](https://patchblox.com/security/data/cve/CVE-2021-42277.md) | Routine | Windows Diagnostic Hub | 5.5 | 0.0087 |  |
| [CVE-2021-42274](https://patchblox.com/security/data/cve/CVE-2021-42274.md) | Routine | Role: Windows Hyper-V | 6.8 | 0.0069 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo