# KB5011493: March 2022 cumulative update for Windows 11 21H2 KB5011493, released March 8, 2022, fixes 28 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5011493 - Platform: Microsoft - Released: Mar 8, 2022 - Priority: Urgent (Closes CVE-2022-23253, exploitation more likely) - CVEs: 28, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://support.microsoft.com/help/5011493 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft Defender for Endpoint for Windows on Windows 11 version 21H2 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-defender-for-endpoint-for-windows-on-windows-11-version-21h2-for-arm64-based-systems.md) | | 22000.556 | | [Microsoft Defender for Endpoint for Windows on Windows 11 version 21H2 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-defender-for-endpoint-for-windows-on-windows-11-version-21h2-for-x64-based-systems.md) | | 22000.556 | | [Windows 11 version 21H2 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-21h2-for-arm64-based-systems.md) | | 22000.556 | | [Windows 11 version 21H2 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-21h2-for-x64-based-systems.md) | | 22000.556 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-23253](https://patchblox.com/security/data/cve/CVE-2022-23253.md) | Urgent | Windows Point-to-Point Tunneling Protocol | 6.5 | 0.5638 | More likely | | [CVE-2022-24502](https://patchblox.com/security/data/cve/CVE-2022-24502.md) | Urgent | Windows HTML Platform | 4.3 | 0.3306 | More likely | | [CVE-2022-21990](https://patchblox.com/security/data/cve/CVE-2022-21990.md) | Urgent | Windows Remote Desktop | 8.8 | 0.1884 | Disclosed | | [CVE-2022-23299](https://patchblox.com/security/data/cve/CVE-2022-23299.md) | Urgent | Windows PDEV | 7.8 | 0.0762 | More likely | | [CVE-2022-23286](https://patchblox.com/security/data/cve/CVE-2022-23286.md) | Urgent | Windows Cloud Files Mini Filter Driver | 7.0 | 0.0430 | More likely | | [CVE-2022-24507](https://patchblox.com/security/data/cve/CVE-2022-24507.md) | Urgent | Windows Ancillary Function Driver for WinSock | 7.8 | 0.0387 | More likely | | [CVE-2022-24508](https://patchblox.com/security/data/cve/CVE-2022-24508.md) | Urgent | Windows SMB Server | 8.8 | 0.0255 | More likely | | [CVE-2022-23294](https://patchblox.com/security/data/cve/CVE-2022-23294.md) | Urgent | Windows Event Tracing | 8.8 | 0.0230 | More likely | | [CVE-2022-23284](https://patchblox.com/security/data/cve/CVE-2022-23284.md) | High | Windows Print Spooler Components | 7.2 | 0.0317 | | | [CVE-2022-24460](https://patchblox.com/security/data/cve/CVE-2022-24460.md) | High | Tablet Windows User Interface | 7.0 | 0.0201 | | | [CVE-2022-21967](https://patchblox.com/security/data/cve/CVE-2022-21967.md) | High | XBox | 7.0 | 0.0068 | | | [CVE-2022-23293](https://patchblox.com/security/data/cve/CVE-2022-23293.md) | High | Windows Fast FAT Driver | 7.8 | 0.0067 | | | [CVE-2022-23296](https://patchblox.com/security/data/cve/CVE-2022-23296.md) | High | Windows Installer | 7.8 | 0.0067 | | | [CVE-2022-23291](https://patchblox.com/security/data/cve/CVE-2022-23291.md) | High | Windows DWM Core Library | 7.8 | 0.0064 | | | [CVE-2022-24459](https://patchblox.com/security/data/cve/CVE-2022-24459.md) | High | Windows Fax and Scan Service | 7.8 | 0.0064 | Disclosed | | [CVE-2022-23290](https://patchblox.com/security/data/cve/CVE-2022-23290.md) | High | Windows COM | 7.8 | 0.0063 | | | [CVE-2022-24454](https://patchblox.com/security/data/cve/CVE-2022-24454.md) | High | Windows Security Support Provider Interface | 7.8 | 0.0063 | | | [CVE-2022-23287](https://patchblox.com/security/data/cve/CVE-2022-23287.md) | High | Windows ALPC | 7.0 | 0.0058 | | | [CVE-2022-23298](https://patchblox.com/security/data/cve/CVE-2022-23298.md) | High | Windows Kernel | 7.0 | 0.0058 | | | [CVE-2022-24525](https://patchblox.com/security/data/cve/CVE-2022-24525.md) | High | Windows Update Stack | 7.0 | 0.0044 | | | [CVE-2022-23283](https://patchblox.com/security/data/cve/CVE-2022-23283.md) | High | Windows ALPC | 7.0 | 0.0039 | | | [CVE-2022-24505](https://patchblox.com/security/data/cve/CVE-2022-24505.md) | High | Windows ALPC | 7.0 | 0.0036 | | | [CVE-2022-22010](https://patchblox.com/security/data/cve/CVE-2022-22010.md) | Routine | Microsoft Windows Codecs Library | 4.4 | 0.0263 | | | [CVE-2022-21977](https://patchblox.com/security/data/cve/CVE-2022-21977.md) | Routine | Microsoft Windows Codecs Library | 3.3 | 0.0253 | | | [CVE-2022-24503](https://patchblox.com/security/data/cve/CVE-2022-24503.md) | Routine | Windows Remote Desktop | 5.4 | 0.0244 | | | [CVE-2022-23278](https://patchblox.com/security/data/cve/CVE-2022-23278.md) | Routine | Microsoft Defender for Endpoint | 5.9 | 0.0191 | | | [CVE-2022-23281](https://patchblox.com/security/data/cve/CVE-2022-23281.md) | Routine | Windows Common Log File System Driver | 5.5 | 0.0113 | | | [CVE-2022-23297](https://patchblox.com/security/data/cve/CVE-2022-23297.md) | Routine | Windows Kernel | 5.5 | 0.0079 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo