# KB5019081: November 2022 cumulative update for Windows Server 2022 KB5019081, released November 8, 2022, fixes 36 CVEs across 2 products. 5 of them are being exploited (CVE-2022-41128); 5 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5019081 - Platform: Microsoft - Released: Nov 8, 2022 - Priority: Patch now (Closes CVE-2022-41128, exploited (CISA KEV)) - CVEs: 36, exploited: 5, on CISA KEV: 5 - Vendor advisory: https://support.microsoft.com/help/5019081 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2022](https://patchblox.com/security/data/product/microsoft/windows-server-2022.md) | | 20348.1249 | | [Windows Server 2022 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2022-server-core-installation.md) | | 20348.1249 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-41128](https://patchblox.com/security/data/cve/CVE-2022-41128.md) | Patch now | Windows Scripting | 8.8 | 0.2462 | CISA KEV | | [CVE-2022-41049](https://patchblox.com/security/data/cve/CVE-2022-41049.md) | Patch now | Windows Mark of the Web (MOTW) | 5.4 | 0.0327 | CISA KEV | | [CVE-2022-41125](https://patchblox.com/security/data/cve/CVE-2022-41125.md) | Patch now | Windows CNG Key Isolation Service | 7.8 | 0.0305 | CISA KEV | | [CVE-2022-41073](https://patchblox.com/security/data/cve/CVE-2022-41073.md) | Patch now | Windows Print Spooler Components | 7.8 | 0.0263 | CISA KEV, Ransomware | | [CVE-2022-41091](https://patchblox.com/security/data/cve/CVE-2022-41091.md) | Patch now | Windows Mark of the Web (MOTW) | 5.4 | 0.0225 | CISA KEV, Ransomware, Disclosed | | [CVE-2022-41109](https://patchblox.com/security/data/cve/CVE-2022-41109.md) | Urgent | Windows Win32K | 7.8 | 0.0812 | More likely | | [CVE-2022-41058](https://patchblox.com/security/data/cve/CVE-2022-41058.md) | Urgent | Windows Network Address Translation (NAT) | 7.5 | 0.0254 | More likely | | [CVE-2022-41039](https://patchblox.com/security/data/cve/CVE-2022-41039.md) | Urgent | Windows Point-to-Point Tunneling Protocol | 8.1 | 0.0139 | | | [CVE-2022-41118](https://patchblox.com/security/data/cve/CVE-2022-41118.md) | Urgent | Windows Scripting | 7.5 | 0.0137 | More likely | | [CVE-2022-41090](https://patchblox.com/security/data/cve/CVE-2022-41090.md) | Urgent | Windows Point-to-Point Tunneling Protocol | 5.9 | 0.0129 | More likely | | [CVE-2022-41088](https://patchblox.com/security/data/cve/CVE-2022-41088.md) | Urgent | Windows Point-to-Point Tunneling Protocol | 8.1 | 0.0126 | | | [CVE-2022-41057](https://patchblox.com/security/data/cve/CVE-2022-41057.md) | Urgent | Windows HTTP.sys | 7.8 | 0.0126 | More likely | | [CVE-2023-21712](https://patchblox.com/security/data/cve/CVE-2023-21712.md) | Urgent | Windows Point-to-Point Tunneling Protocol | 8.1 | 0.0099 | | | [CVE-2022-41092](https://patchblox.com/security/data/cve/CVE-2022-41092.md) | Urgent | Windows Win32K | 7.8 | 0.0081 | More likely | | [CVE-2022-41096](https://patchblox.com/security/data/cve/CVE-2022-41096.md) | Urgent | Windows DWM Core Library | 7.8 | 0.0072 | More likely | | [CVE-2022-38015](https://patchblox.com/security/data/cve/CVE-2022-38015.md) | Urgent | Role: Windows Hyper-V | 6.5 | 0.0070 | | | [CVE-2022-41055](https://patchblox.com/security/data/cve/CVE-2022-41055.md) | Urgent | Windows Devices Human Interface | 5.5 | 0.0064 | More likely | | [CVE-2022-41056](https://patchblox.com/security/data/cve/CVE-2022-41056.md) | High | Network Policy Server (NPS) | 7.5 | 0.0254 | | | [CVE-2022-41053](https://patchblox.com/security/data/cve/CVE-2022-41053.md) | High | Windows Kerberos | 7.5 | 0.0252 | | | [CVE-2022-41047](https://patchblox.com/security/data/cve/CVE-2022-41047.md) | High | Windows ODBC Driver | 8.8 | 0.0195 | | | [CVE-2022-41048](https://patchblox.com/security/data/cve/CVE-2022-41048.md) | High | Windows ODBC Driver | 8.8 | 0.0195 | | | [CVE-2022-41052](https://patchblox.com/security/data/cve/CVE-2022-41052.md) | High | Microsoft Graphics Component | 7.8 | 0.0094 | | | [CVE-2022-41114](https://patchblox.com/security/data/cve/CVE-2022-41114.md) | High | Windows Bind Filter Driver | 7.0 | 0.0063 | | | [CVE-2022-41050](https://patchblox.com/security/data/cve/CVE-2022-41050.md) | High | Windows Extensible File Allocation | 7.8 | 0.0061 | | | [CVE-2022-41101](https://patchblox.com/security/data/cve/CVE-2022-41101.md) | High | Windows Overlay Filter | 7.8 | 0.0060 | | | [CVE-2022-41102](https://patchblox.com/security/data/cve/CVE-2022-41102.md) | High | Windows Overlay Filter | 7.8 | 0.0060 | | | [CVE-2022-37992](https://patchblox.com/security/data/cve/CVE-2022-37992.md) | High | Windows Group Policy Preference Client | 7.8 | 0.0058 | | | [CVE-2022-41054](https://patchblox.com/security/data/cve/CVE-2022-41054.md) | High | Windows Resilient File System (ReFS) | 7.8 | 0.0058 | | | [CVE-2022-41095](https://patchblox.com/security/data/cve/CVE-2022-41095.md) | High | Windows Digital Media | 7.8 | 0.0058 | | | [CVE-2022-41045](https://patchblox.com/security/data/cve/CVE-2022-41045.md) | High | Windows ALPC | 7.8 | 0.0035 | | | [CVE-2022-41100](https://patchblox.com/security/data/cve/CVE-2022-41100.md) | High | Windows ALPC | 7.8 | 0.0035 | | | [CVE-2022-41093](https://patchblox.com/security/data/cve/CVE-2022-41093.md) | High | Windows Advanced Local Procedure Call | 7.8 | 0.0034 | | | [CVE-2022-41097](https://patchblox.com/security/data/cve/CVE-2022-41097.md) | Routine | Network Policy Server (NPS) | 6.5 | 0.0201 | | | [CVE-2022-41098](https://patchblox.com/security/data/cve/CVE-2022-41098.md) | Routine | Windows Win32K | 5.5 | 0.0085 | | | [CVE-2022-23824](https://patchblox.com/security/data/cve/CVE-2022-23824.md) | Routine | AMD CPU Branch | 5.5 | 0.0062 | | | [CVE-2022-41086](https://patchblox.com/security/data/cve/CVE-2022-41086.md) | Routine | Windows Group Policy Preference Client | 6.4 | 0.0030 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo