# KB5009619: January 2022 security update KB5009619, released January 11, 2022, fixes 48 CVEs across 2 products. One of them is being exploited (CVE-2022-21919); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5009619 - Platform: Microsoft - Released: Jan 11, 2022 - Priority: Patch now (Closes CVE-2022-21919, exploited (CISA KEV)) - CVEs: 48, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://support.microsoft.com/help/5009619 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2012](https://patchblox.com/security/data/product/microsoft/windows-server-2012.md) | | | | [Windows Server 2012 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2012-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-21919](https://patchblox.com/security/data/cve/CVE-2022-21919.md) | Patch now | Windows User Profile Service | 7.0 | 0.0257 | CISA KEV, Disclosed | | [CVE-2022-21857](https://patchblox.com/security/data/cve/CVE-2022-21857.md) | Urgent | Windows Active Directory | 8.8 | 0.0264 | | | [CVE-2022-21897](https://patchblox.com/security/data/cve/CVE-2022-21897.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0109 | More likely | | [CVE-2022-21916](https://patchblox.com/security/data/cve/CVE-2022-21916.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0100 | More likely | | [CVE-2022-21908](https://patchblox.com/security/data/cve/CVE-2022-21908.md) | Urgent | Windows Installer | 7.8 | 0.0093 | More likely | | [CVE-2022-21903](https://patchblox.com/security/data/cve/CVE-2022-21903.md) | Urgent | Microsoft Graphics Component | 7.0 | 0.0084 | More likely | | [CVE-2022-21885](https://patchblox.com/security/data/cve/CVE-2022-21885.md) | Urgent | Windows Remote Access Connection Manager | 7.8 | 0.0069 | More likely | | [CVE-2022-21914](https://patchblox.com/security/data/cve/CVE-2022-21914.md) | Urgent | Windows Remote Access Connection Manager | 7.8 | 0.0069 | More likely | | [CVE-2022-21833](https://patchblox.com/security/data/cve/CVE-2022-21833.md) | Urgent | Windows Virtual Machine IDE Drive | 7.8 | 0.0065 | | | [CVE-2022-21893](https://patchblox.com/security/data/cve/CVE-2022-21893.md) | High | Windows RDP | 8.0 | 0.0863 | | | [CVE-2022-21883](https://patchblox.com/security/data/cve/CVE-2022-21883.md) | High | Windows IKE Extension | 7.5 | 0.0464 | | | [CVE-2022-21848](https://patchblox.com/security/data/cve/CVE-2022-21848.md) | High | Windows IKE Extension | 7.5 | 0.0440 | | | [CVE-2022-21880](https://patchblox.com/security/data/cve/CVE-2022-21880.md) | High | Microsoft Graphics Component | 7.5 | 0.0410 | | | [CVE-2022-21904](https://patchblox.com/security/data/cve/CVE-2022-21904.md) | High | Microsoft Graphics Component | 7.5 | 0.0373 | | | [CVE-2022-21843](https://patchblox.com/security/data/cve/CVE-2022-21843.md) | High | Windows IKE Extension | 7.5 | 0.0356 | | | [CVE-2022-21889](https://patchblox.com/security/data/cve/CVE-2022-21889.md) | High | Windows IKE Extension | 7.5 | 0.0320 | | | [CVE-2022-21890](https://patchblox.com/security/data/cve/CVE-2022-21890.md) | High | Windows IKE Extension | 7.5 | 0.0320 | | | [CVE-2022-21850](https://patchblox.com/security/data/cve/CVE-2022-21850.md) | High | Windows RDP | 8.8 | 0.0294 | | | [CVE-2022-21851](https://patchblox.com/security/data/cve/CVE-2022-21851.md) | High | Windows RDP | 8.8 | 0.0294 | | | [CVE-2022-21920](https://patchblox.com/security/data/cve/CVE-2022-21920.md) | High | Windows Kerberos | 8.8 | 0.0293 | | | [CVE-2022-21922](https://patchblox.com/security/data/cve/CVE-2022-21922.md) | High | Windows Remote Procedure Call Runtime | 8.8 | 0.0293 | | | [CVE-2022-21895](https://patchblox.com/security/data/cve/CVE-2022-21895.md) | High | Windows User Profile Service | 7.8 | 0.0126 | | | [CVE-2022-21864](https://patchblox.com/security/data/cve/CVE-2022-21864.md) | High | Windows UI Immersive Server | 7.0 | 0.0079 | | | [CVE-2022-21836](https://patchblox.com/security/data/cve/CVE-2022-21836.md) | High | Windows Certificates | 7.8 | 0.0072 | Disclosed | | [CVE-2022-21870](https://patchblox.com/security/data/cve/CVE-2022-21870.md) | High | Tablet Windows User Interface | 7.0 | 0.0069 | | | [CVE-2022-21875](https://patchblox.com/security/data/cve/CVE-2022-21875.md) | High | Windows Storage | 7.0 | 0.0069 | | | [CVE-2022-21867](https://patchblox.com/security/data/cve/CVE-2022-21867.md) | High | Windows Push Notifications | 7.0 | 0.0069 | | | [CVE-2022-21835](https://patchblox.com/security/data/cve/CVE-2022-21835.md) | High | Windows Cryptographic Services | 7.8 | 0.0069 | | | [CVE-2022-21884](https://patchblox.com/security/data/cve/CVE-2022-21884.md) | High | Windows Local Security Authority Subsystem Service (LSASS) | 7.8 | 0.0069 | | | [CVE-2022-21834](https://patchblox.com/security/data/cve/CVE-2022-21834.md) | High | Windows User-mode Driver Framework | 7.0 | 0.0065 | | | [CVE-2022-21862](https://patchblox.com/security/data/cve/CVE-2022-21862.md) | High | Windows Application Model | 7.0 | 0.0065 | | | [CVE-2022-21894](https://patchblox.com/security/data/cve/CVE-2022-21894.md) | Routine | Windows Secure Boot | 4.4 | 0.0912 | | | [CVE-2022-21924](https://patchblox.com/security/data/cve/CVE-2022-21924.md) | Routine | Windows Workstation Service Remote Protocol | 5.3 | 0.0307 | | | [CVE-2022-21915](https://patchblox.com/security/data/cve/CVE-2022-21915.md) | Routine | Microsoft Graphics Component | 6.5 | 0.0292 | | | [CVE-2022-21913](https://patchblox.com/security/data/cve/CVE-2022-21913.md) | Routine | Windows Local Security Authority | 5.3 | 0.0284 | | | [CVE-2022-21838](https://patchblox.com/security/data/cve/CVE-2022-21838.md) | Routine | Windows Cleanup Manager | 5.5 | 0.0152 | | | [CVE-2022-21899](https://patchblox.com/security/data/cve/CVE-2022-21899.md) | Routine | Windows UEFI | 5.5 | 0.0146 | | | [CVE-2022-21876](https://patchblox.com/security/data/cve/CVE-2022-21876.md) | Routine | Windows Win32K | 5.5 | 0.0132 | | | [CVE-2022-21892](https://patchblox.com/security/data/cve/CVE-2022-21892.md) | Routine | Windows Resilient File System (ReFS) | 6.8 | 0.0076 | | | [CVE-2022-21958](https://patchblox.com/security/data/cve/CVE-2022-21958.md) | Routine | Windows Resilient File System (ReFS) | 6.8 | 0.0076 | | | [CVE-2022-21959](https://patchblox.com/security/data/cve/CVE-2022-21959.md) | Routine | Windows Resilient File System (ReFS) | 6.8 | 0.0076 | | | [CVE-2022-21960](https://patchblox.com/security/data/cve/CVE-2022-21960.md) | Routine | Windows Resilient File System (ReFS) | 6.8 | 0.0076 | | | [CVE-2022-21961](https://patchblox.com/security/data/cve/CVE-2022-21961.md) | Routine | Windows Resilient File System (ReFS) | 6.8 | 0.0076 | | | [CVE-2022-21962](https://patchblox.com/security/data/cve/CVE-2022-21962.md) | Routine | Windows Resilient File System (ReFS) | 6.8 | 0.0076 | | | [CVE-2022-21905](https://patchblox.com/security/data/cve/CVE-2022-21905.md) | Routine | Role: Windows Hyper-V | 4.6 | 0.0075 | | | [CVE-2022-21963](https://patchblox.com/security/data/cve/CVE-2022-21963.md) | Routine | Windows Resilient File System (ReFS) | 6.4 | 0.0072 | | | [CVE-2022-21900](https://patchblox.com/security/data/cve/CVE-2022-21900.md) | Routine | Role: Windows Hyper-V | 4.6 | 0.0068 | | | [CVE-2022-21928](https://patchblox.com/security/data/cve/CVE-2022-21928.md) | Routine | Windows Resilient File System (ReFS) | 6.3 | 0.0067 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo