# KB5010354: February 2022 cumulative update for Windows Server 2022

KB5010354, released February 8, 2022, fixes 21 CVEs across 2 products. 3 of them are being exploited (CVE-2022-21971); 3 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/microsoft/kb5010354
- Platform: Microsoft
- Released: Feb 8, 2022
- Priority: Patch now (Closes CVE-2022-21971, exploited (CISA KEV))
- CVEs: 21, exploited: 3, on CISA KEV: 3
- Vendor advisory: https://support.microsoft.com/help/5010354

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Windows Server 2022](https://patchblox.com/security/data/product/microsoft/windows-server-2022.md) |  | 20348.524 |
| [Windows Server 2022 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2022-server-core-installation.md) |  | 20348.524 |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2022-21971](https://patchblox.com/security/data/cve/CVE-2022-21971.md) | Patch now | Windows Remote Procedure Call Runtime | 7.8 | 0.5393 | CISA KEV |
| [CVE-2022-21999](https://patchblox.com/security/data/cve/CVE-2022-21999.md) | Patch now | Windows Print Spooler Components | 7.8 | 0.4101 | CISA KEV, Ransomware |
| [CVE-2022-22718](https://patchblox.com/security/data/cve/CVE-2022-22718.md) | Patch now | Windows Print Spooler Components | 7.8 | 0.1846 | CISA KEV |
| [CVE-2022-22715](https://patchblox.com/security/data/cve/CVE-2022-22715.md) | Urgent | Windows Named Pipe File System | 7.8 | 0.1351 | More likely |
| [CVE-2022-22000](https://patchblox.com/security/data/cve/CVE-2022-22000.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0433 | More likely |
| [CVE-2022-21994](https://patchblox.com/security/data/cve/CVE-2022-21994.md) | Urgent | Windows DWM Core Library | 7.8 | 0.0420 | More likely |
| [CVE-2022-21989](https://patchblox.com/security/data/cve/CVE-2022-21989.md) | Urgent | Windows Kernel | 7.8 | 0.0319 | Disclosed |
| [CVE-2022-21981](https://patchblox.com/security/data/cve/CVE-2022-21981.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0057 | More likely |
| [CVE-2022-21993](https://patchblox.com/security/data/cve/CVE-2022-21993.md) | High | Windows Kernel-Mode Drivers | 7.5 | 0.4362 |  |
| [CVE-2022-21974](https://patchblox.com/security/data/cve/CVE-2022-21974.md) | High | Roaming Security Rights Management Services | 7.8 | 0.0501 |  |
| [CVE-2022-21984](https://patchblox.com/security/data/cve/CVE-2022-21984.md) | High | Role: DNS Server | 8.8 | 0.0480 |  |
| [CVE-2022-21992](https://patchblox.com/security/data/cve/CVE-2022-21992.md) | High | Windows Kernel | 7.8 | 0.0250 |  |
| [CVE-2022-21995](https://patchblox.com/security/data/cve/CVE-2022-21995.md) | High | Role: Windows Hyper-V | 7.9 | 0.0097 |  |
| [CVE-2022-21997](https://patchblox.com/security/data/cve/CVE-2022-21997.md) | High | Windows Print Spooler Components | 7.1 | 0.0080 |  |
| [CVE-2022-22717](https://patchblox.com/security/data/cve/CVE-2022-22717.md) | High | Windows Print Spooler Components | 7.0 | 0.0071 |  |
| [CVE-2022-22001](https://patchblox.com/security/data/cve/CVE-2022-22001.md) | High | Windows Remote Access Connection Manager | 7.8 | 0.0064 |  |
| [CVE-2022-22002](https://patchblox.com/security/data/cve/CVE-2022-22002.md) | Routine | Windows User Account Profile | 5.5 | 0.0128 |  |
| [CVE-2022-22710](https://patchblox.com/security/data/cve/CVE-2022-22710.md) | Routine | Windows Common Log File System Driver | 5.5 | 0.0089 |  |
| [CVE-2022-21998](https://patchblox.com/security/data/cve/CVE-2022-21998.md) | Routine | Windows Common Log File System Driver | 5.5 | 0.0084 |  |
| [CVE-2022-22712](https://patchblox.com/security/data/cve/CVE-2022-22712.md) | Routine | Role: Windows Hyper-V | 5.6 | 0.0080 |  |
| [CVE-2022-21985](https://patchblox.com/security/data/cve/CVE-2022-21985.md) | Routine | Windows Remote Access Connection Manager | 5.5 | 0.0079 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo