# KB5010395: February 2022 security update

KB5010395, released February 8, 2022, fixes 14 CVEs across 4 products. 2 of them are being exploited (CVE-2022-21999); 2 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/microsoft/kb5010395
- Platform: Microsoft
- Released: Feb 8, 2022
- Priority: Patch now (Closes CVE-2022-21999, exploited (CISA KEV, ransomware))
- CVEs: 14, exploited: 2, on CISA KEV: 2
- Vendor advisory: https://support.microsoft.com/help/5010395

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Windows 8.1 for 32-bit systems](https://patchblox.com/security/data/product/microsoft/windows-8.1-for-32-bit-systems.md) |  |  |
| [Windows 8.1 for x64-based systems](https://patchblox.com/security/data/product/microsoft/windows-8.1-for-x64-based-systems.md) |  |  |
| [Windows Server 2012 R2](https://patchblox.com/security/data/product/microsoft/windows-server-2012-r2.md) |  |  |
| [Windows Server 2012 R2 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2012-r2-server-core-installation.md) |  |  |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2022-21999](https://patchblox.com/security/data/cve/CVE-2022-21999.md) | Patch now | Windows Print Spooler Components | 7.8 | 0.4101 | CISA KEV, Ransomware |
| [CVE-2022-22718](https://patchblox.com/security/data/cve/CVE-2022-22718.md) | Patch now | Windows Print Spooler Components | 7.8 | 0.1846 | CISA KEV |
| [CVE-2022-22000](https://patchblox.com/security/data/cve/CVE-2022-22000.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0433 | More likely |
| [CVE-2022-21989](https://patchblox.com/security/data/cve/CVE-2022-21989.md) | Urgent | Windows Kernel | 7.8 | 0.0319 | Disclosed |
| [CVE-2022-21981](https://patchblox.com/security/data/cve/CVE-2022-21981.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0057 | More likely |
| [CVE-2022-21993](https://patchblox.com/security/data/cve/CVE-2022-21993.md) | High | Windows Kernel-Mode Drivers | 7.5 | 0.4362 |  |
| [CVE-2022-21997](https://patchblox.com/security/data/cve/CVE-2022-21997.md) | High | Windows Print Spooler Components | 7.1 | 0.0080 |  |
| [CVE-2022-22717](https://patchblox.com/security/data/cve/CVE-2022-22717.md) | High | Windows Print Spooler Components | 7.0 | 0.0071 |  |
| [CVE-2022-22001](https://patchblox.com/security/data/cve/CVE-2022-22001.md) | High | Windows Remote Access Connection Manager | 7.8 | 0.0064 |  |
| [CVE-2021-34500](https://patchblox.com/security/data/cve/CVE-2021-34500.md) | Routine | Windows Kernel | 6.3 | 0.0266 |  |
| [CVE-2022-22002](https://patchblox.com/security/data/cve/CVE-2022-22002.md) | Routine | Windows User Account Profile | 5.5 | 0.0128 |  |
| [CVE-2022-22710](https://patchblox.com/security/data/cve/CVE-2022-22710.md) | Routine | Windows Common Log File System Driver | 5.5 | 0.0089 |  |
| [CVE-2022-21998](https://patchblox.com/security/data/cve/CVE-2022-21998.md) | Routine | Windows Common Log File System Driver | 5.5 | 0.0084 |  |
| [CVE-2022-21985](https://patchblox.com/security/data/cve/CVE-2022-21985.md) | Routine | Windows Remote Access Connection Manager | 5.5 | 0.0079 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo