# KB5020013: November 2022 security update

KB5020013, released November 8, 2022, fixes 21 CVEs across 4 products. 2 of them are being exploited (CVE-2022-41128); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/microsoft/kb5020013
- Platform: Microsoft
- Released: Nov 8, 2022
- Priority: Patch now (Closes CVE-2022-41128, exploited (CISA KEV))
- CVEs: 21, exploited: 2, on CISA KEV: 2
- Vendor advisory: https://support.microsoft.com/help/5020013

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Windows 7 for 32-bit Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-7-for-32-bit-systems-service-pack-1.md) |  |  |
| [Windows 7 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-7-for-x64-based-systems-service-pack-1.md) |  |  |
| [Windows Server 2008 R2 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1.md) |  |  |
| [Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1-server-core-installation.md) |  |  |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2022-41128](https://patchblox.com/security/data/cve/CVE-2022-41128.md) | Patch now | Windows Scripting | 8.8 | 0.2462 | CISA KEV |
| [CVE-2022-41073](https://patchblox.com/security/data/cve/CVE-2022-41073.md) | Patch now | Windows Print Spooler Components | 7.8 | 0.0263 | CISA KEV, Ransomware |
| [CVE-2022-41109](https://patchblox.com/security/data/cve/CVE-2022-41109.md) | Urgent | Windows Win32K | 7.8 | 0.0812 | More likely |
| [CVE-2022-41058](https://patchblox.com/security/data/cve/CVE-2022-41058.md) | Urgent | Windows Network Address Translation (NAT) | 7.5 | 0.0254 | More likely |
| [CVE-2022-41039](https://patchblox.com/security/data/cve/CVE-2022-41039.md) | Urgent | Windows Point-to-Point Tunneling Protocol | 8.1 | 0.0139 |  |
| [CVE-2022-41118](https://patchblox.com/security/data/cve/CVE-2022-41118.md) | Urgent | Windows Scripting | 7.5 | 0.0137 | More likely |
| [CVE-2022-41044](https://patchblox.com/security/data/cve/CVE-2022-41044.md) | Urgent | Windows Point-to-Point Tunneling Protocol | 8.1 | 0.0133 |  |
| [CVE-2022-41090](https://patchblox.com/security/data/cve/CVE-2022-41090.md) | Urgent | Windows Point-to-Point Tunneling Protocol | 5.9 | 0.0129 | More likely |
| [CVE-2022-41057](https://patchblox.com/security/data/cve/CVE-2022-41057.md) | Urgent | Windows HTTP.sys | 7.8 | 0.0126 | More likely |
| [CVE-2022-41056](https://patchblox.com/security/data/cve/CVE-2022-41056.md) | High | Network Policy Server (NPS) | 7.5 | 0.0254 |  |
| [CVE-2022-41053](https://patchblox.com/security/data/cve/CVE-2022-41053.md) | High | Windows Kerberos | 7.5 | 0.0252 |  |
| [CVE-2022-41047](https://patchblox.com/security/data/cve/CVE-2022-41047.md) | High | Windows ODBC Driver | 8.8 | 0.0195 |  |
| [CVE-2022-41048](https://patchblox.com/security/data/cve/CVE-2022-41048.md) | High | Windows ODBC Driver | 8.8 | 0.0195 |  |
| [CVE-2022-37992](https://patchblox.com/security/data/cve/CVE-2022-37992.md) | High | Windows Group Policy Preference Client | 7.8 | 0.0058 |  |
| [CVE-2022-41095](https://patchblox.com/security/data/cve/CVE-2022-41095.md) | High | Windows Digital Media | 7.8 | 0.0058 |  |
| [CVE-2022-41045](https://patchblox.com/security/data/cve/CVE-2022-41045.md) | High | Windows ALPC | 7.8 | 0.0035 |  |
| [CVE-2022-41097](https://patchblox.com/security/data/cve/CVE-2022-41097.md) | Routine | Network Policy Server (NPS) | 6.5 | 0.0201 |  |
| [CVE-2022-41116](https://patchblox.com/security/data/cve/CVE-2022-41116.md) | Routine | Windows Point-to-Point Tunneling Protocol | 5.9 | 0.0129 |  |
| [CVE-2022-41098](https://patchblox.com/security/data/cve/CVE-2022-41098.md) | Routine | Windows Win32K | 5.5 | 0.0085 |  |
| [CVE-2022-23824](https://patchblox.com/security/data/cve/CVE-2022-23824.md) | Routine | AMD CPU Branch | 5.5 | 0.0062 |  |
| [CVE-2022-41086](https://patchblox.com/security/data/cve/CVE-2022-41086.md) | Routine | Windows Group Policy Preference Client | 6.4 | 0.0030 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo