# KB5019959: November 2022 cumulative update for Windows 10 20H2 KB5019959, released November 8, 2022, fixes 39 CVEs across 11 products. 6 of them are being exploited (CVE-2021-34527); 6 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5019959 - Platform: Microsoft - Released: Nov 8, 2022 - Priority: Patch now (Closes CVE-2021-34527, exploited (CISA KEV, ransomware)) - CVEs: 39, exploited: 6, on CISA KEV: 6 - Vendor advisory: https://support.microsoft.com/help/5019959 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows 10 Version 20H2 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-20h2-for-32-bit-systems.md) | | | | [Windows 10 Version 20H2 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-20h2-for-arm64-based-systems.md) | | | | [Windows 10 Version 21H1 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-21h1-for-32-bit-systems.md) | | | | [Windows 10 Version 21H1 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-21h1-for-arm64-based-systems.md) | | | | [Windows 10 Version 21H1 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-21h1-for-x64-based-systems.md) | | | | [Windows 10 Version 21H2 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-21h2-for-32-bit-systems.md) | | | | [Windows 10 Version 21H2 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-21h2-for-arm64-based-systems.md) | | | | [Windows 10 Version 21H2 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-21h2-for-x64-based-systems.md) | | | | [Windows 10 Version 22H2 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-22h2-for-32-bit-systems.md) | | | | [Windows 10 Version 22H2 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-22h2-for-arm64-based-systems.md) | | | | [Windows 10 Version 22H2 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-22h2-for-x64-based-systems.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2021-34527](https://patchblox.com/security/data/cve/CVE-2021-34527.md) | Patch now | Windows Print Spooler Components | 8.8 | 0.9979 | CISA KEV, Ransomware, Disclosed | | [CVE-2022-41128](https://patchblox.com/security/data/cve/CVE-2022-41128.md) | Patch now | Windows Scripting | 8.8 | 0.2462 | CISA KEV | | [CVE-2022-41049](https://patchblox.com/security/data/cve/CVE-2022-41049.md) | Patch now | Windows Mark of the Web (MOTW) | 5.4 | 0.0327 | CISA KEV | | [CVE-2022-41125](https://patchblox.com/security/data/cve/CVE-2022-41125.md) | Patch now | Windows CNG Key Isolation Service | 7.8 | 0.0305 | CISA KEV | | [CVE-2022-41073](https://patchblox.com/security/data/cve/CVE-2022-41073.md) | Patch now | Windows Print Spooler Components | 7.8 | 0.0263 | CISA KEV, Ransomware | | [CVE-2022-41091](https://patchblox.com/security/data/cve/CVE-2022-41091.md) | Patch now | Windows Mark of the Web (MOTW) | 5.4 | 0.0225 | CISA KEV, Ransomware, Disclosed | | [CVE-2022-41113](https://patchblox.com/security/data/cve/CVE-2022-41113.md) | Urgent | Microsoft Graphics Component | 7.8 | 0.0813 | More likely | | [CVE-2022-41109](https://patchblox.com/security/data/cve/CVE-2022-41109.md) | Urgent | Windows Win32K | 7.8 | 0.0812 | More likely | | [CVE-2022-41058](https://patchblox.com/security/data/cve/CVE-2022-41058.md) | Urgent | Windows Network Address Translation (NAT) | 7.5 | 0.0254 | More likely | | [CVE-2022-41039](https://patchblox.com/security/data/cve/CVE-2022-41039.md) | Urgent | Windows Point-to-Point Tunneling Protocol | 8.1 | 0.0139 | | | [CVE-2022-41118](https://patchblox.com/security/data/cve/CVE-2022-41118.md) | Urgent | Windows Scripting | 7.5 | 0.0137 | More likely | | [CVE-2022-41090](https://patchblox.com/security/data/cve/CVE-2022-41090.md) | Urgent | Windows Point-to-Point Tunneling Protocol | 5.9 | 0.0129 | More likely | | [CVE-2022-41088](https://patchblox.com/security/data/cve/CVE-2022-41088.md) | Urgent | Windows Point-to-Point Tunneling Protocol | 8.1 | 0.0126 | | | [CVE-2022-41057](https://patchblox.com/security/data/cve/CVE-2022-41057.md) | Urgent | Windows HTTP.sys | 7.8 | 0.0126 | More likely | | [CVE-2023-21712](https://patchblox.com/security/data/cve/CVE-2023-21712.md) | Urgent | Windows Point-to-Point Tunneling Protocol | 8.1 | 0.0099 | | | [CVE-2022-41092](https://patchblox.com/security/data/cve/CVE-2022-41092.md) | Urgent | Windows Win32K | 7.8 | 0.0081 | More likely | | [CVE-2022-41096](https://patchblox.com/security/data/cve/CVE-2022-41096.md) | Urgent | Windows DWM Core Library | 7.8 | 0.0072 | More likely | | [CVE-2022-38015](https://patchblox.com/security/data/cve/CVE-2022-38015.md) | Urgent | Role: Windows Hyper-V | 6.5 | 0.0070 | | | [CVE-2022-41055](https://patchblox.com/security/data/cve/CVE-2022-41055.md) | Urgent | Windows Devices Human Interface | 5.5 | 0.0064 | More likely | | [CVE-2022-41056](https://patchblox.com/security/data/cve/CVE-2022-41056.md) | High | Network Policy Server (NPS) | 7.5 | 0.0254 | | | [CVE-2022-41053](https://patchblox.com/security/data/cve/CVE-2022-41053.md) | High | Windows Kerberos | 7.5 | 0.0252 | | | [CVE-2022-41047](https://patchblox.com/security/data/cve/CVE-2022-41047.md) | High | Windows ODBC Driver | 8.8 | 0.0195 | | | [CVE-2022-41048](https://patchblox.com/security/data/cve/CVE-2022-41048.md) | High | Windows ODBC Driver | 8.8 | 0.0195 | | | [CVE-2022-41052](https://patchblox.com/security/data/cve/CVE-2022-41052.md) | High | Microsoft Graphics Component | 7.8 | 0.0094 | | | [CVE-2022-41114](https://patchblox.com/security/data/cve/CVE-2022-41114.md) | High | Windows Bind Filter Driver | 7.0 | 0.0063 | | | [CVE-2022-41050](https://patchblox.com/security/data/cve/CVE-2022-41050.md) | High | Windows Extensible File Allocation | 7.8 | 0.0061 | | | [CVE-2022-41101](https://patchblox.com/security/data/cve/CVE-2022-41101.md) | High | Windows Overlay Filter | 7.8 | 0.0060 | | | [CVE-2022-41102](https://patchblox.com/security/data/cve/CVE-2022-41102.md) | High | Windows Overlay Filter | 7.8 | 0.0060 | | | [CVE-2022-37992](https://patchblox.com/security/data/cve/CVE-2022-37992.md) | High | Windows Group Policy Preference Client | 7.8 | 0.0058 | | | [CVE-2022-41054](https://patchblox.com/security/data/cve/CVE-2022-41054.md) | High | Windows Resilient File System (ReFS) | 7.8 | 0.0058 | | | [CVE-2022-41095](https://patchblox.com/security/data/cve/CVE-2022-41095.md) | High | Windows Digital Media | 7.8 | 0.0058 | | | [CVE-2022-41045](https://patchblox.com/security/data/cve/CVE-2022-41045.md) | High | Windows ALPC | 7.8 | 0.0035 | | | [CVE-2022-41100](https://patchblox.com/security/data/cve/CVE-2022-41100.md) | High | Windows ALPC | 7.8 | 0.0035 | | | [CVE-2022-41093](https://patchblox.com/security/data/cve/CVE-2022-41093.md) | High | Windows Advanced Local Procedure Call | 7.8 | 0.0034 | | | [CVE-2022-41099](https://patchblox.com/security/data/cve/CVE-2022-41099.md) | Routine | Windows BitLocker | 4.6 | 0.0446 | | | [CVE-2022-41097](https://patchblox.com/security/data/cve/CVE-2022-41097.md) | Routine | Network Policy Server (NPS) | 6.5 | 0.0201 | | | [CVE-2022-41098](https://patchblox.com/security/data/cve/CVE-2022-41098.md) | Routine | Windows Win32K | 5.5 | 0.0085 | | | [CVE-2022-23824](https://patchblox.com/security/data/cve/CVE-2022-23824.md) | Routine | AMD CPU Branch | 5.5 | 0.0062 | | | [CVE-2022-41086](https://patchblox.com/security/data/cve/CVE-2022-41086.md) | Routine | Windows Group Policy Preference Client | 6.4 | 0.0030 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo