# KB5022858: February 2023 cumulative update for Windows 10 1507 KB5022858, released February 14, 2023, fixes 36 CVEs across 4 products. 2 of them are being exploited (CVE-2023-23376); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5022858 - Platform: Microsoft - Released: Feb 14, 2023 - Priority: Patch now (Closes CVE-2023-23376, exploited (CISA KEV, ransomware)) - CVEs: 36, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://support.microsoft.com/help/5022858 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft .NET Framework 3.5 and 4.6.2 on Windows 10 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-and-4.6.2-on-windows-10-for-32-bit-systems.md) | | 10240.19747 | | [Microsoft .NET Framework 3.5 and 4.6.2 on Windows 10 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-and-4.6.2-on-windows-10-for-x64-based-systems.md) | | 10240.19747 | | [Windows 10 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-for-32-bit-systems.md) | | 10240.19747 | | [Windows 10 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-for-x64-based-systems.md) | | 10240.19747 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2023-23376](https://patchblox.com/security/data/cve/CVE-2023-23376.md) | Patch now | Windows Common Log File System Driver | 7.8 | 0.1085 | CISA KEV, Ransomware | | [CVE-2023-21823](https://patchblox.com/security/data/cve/CVE-2023-21823.md) | Patch now | Microsoft Graphics Component | 7.3 | 0.0556 | CISA KEV | | [CVE-2023-21818](https://patchblox.com/security/data/cve/CVE-2023-21818.md) | Urgent | Windows SChannel | 7.5 | 0.4317 | More likely | | [CVE-2023-21690](https://patchblox.com/security/data/cve/CVE-2023-21690.md) | Urgent | Windows Protected EAP (PEAP) | 9.8 | 0.2774 | More likely | | [CVE-2023-21689](https://patchblox.com/security/data/cve/CVE-2023-21689.md) | Urgent | Windows Protected EAP (PEAP) | 9.8 | 0.2670 | More likely | | [CVE-2023-21692](https://patchblox.com/security/data/cve/CVE-2023-21692.md) | Urgent | Windows Protected EAP (PEAP) | 9.8 | 0.2140 | More likely | | [CVE-2023-21688](https://patchblox.com/security/data/cve/CVE-2023-21688.md) | Urgent | Windows ALPC | 7.8 | 0.0363 | More likely | | [CVE-2023-21812](https://patchblox.com/security/data/cve/CVE-2023-21812.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0330 | More likely | | [CVE-2023-21803](https://patchblox.com/security/data/cve/CVE-2023-21803.md) | Urgent | Windows iSCSI | 9.8 | 0.0177 | | | [CVE-2023-21808](https://patchblox.com/security/data/cve/CVE-2023-21808.md) | Urgent | .NET and Visual Studio | 8.4 | 0.0115 | | | [CVE-2023-21822](https://patchblox.com/security/data/cve/CVE-2023-21822.md) | Urgent | Windows Win32K | 7.8 | 0.0077 | More likely | | [CVE-2023-21816](https://patchblox.com/security/data/cve/CVE-2023-21816.md) | High | Windows Active Directory | 7.5 | 0.0174 | | | [CVE-2023-21700](https://patchblox.com/security/data/cve/CVE-2023-21700.md) | High | Windows iSCSI | 7.5 | 0.0165 | | | [CVE-2023-21701](https://patchblox.com/security/data/cve/CVE-2023-21701.md) | High | Windows Protected EAP (PEAP) | 7.5 | 0.0165 | | | [CVE-2023-21702](https://patchblox.com/security/data/cve/CVE-2023-21702.md) | High | Windows iSCSI | 7.5 | 0.0165 | | | [CVE-2023-21811](https://patchblox.com/security/data/cve/CVE-2023-21811.md) | High | Windows iSCSI | 7.5 | 0.0165 | | | [CVE-2023-21813](https://patchblox.com/security/data/cve/CVE-2023-21813.md) | High | Windows Cryptographic Services | 7.5 | 0.0165 | | | [CVE-2023-21691](https://patchblox.com/security/data/cve/CVE-2023-21691.md) | High | Windows Protected EAP (PEAP) | 7.5 | 0.0144 | | | [CVE-2023-21684](https://patchblox.com/security/data/cve/CVE-2023-21684.md) | High | Microsoft PostScript Printer Driver | 8.8 | 0.0130 | | | [CVE-2023-21685](https://patchblox.com/security/data/cve/CVE-2023-21685.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0122 | | | [CVE-2023-21797](https://patchblox.com/security/data/cve/CVE-2023-21797.md) | High | Windows ODBC Driver | 8.8 | 0.0119 | | | [CVE-2023-21798](https://patchblox.com/security/data/cve/CVE-2023-21798.md) | High | Windows ODBC Driver | 8.8 | 0.0119 | | | [CVE-2023-21799](https://patchblox.com/security/data/cve/CVE-2023-21799.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0119 | | | [CVE-2023-21686](https://patchblox.com/security/data/cve/CVE-2023-21686.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0116 | | | [CVE-2023-21695](https://patchblox.com/security/data/cve/CVE-2023-21695.md) | High | Windows Protected EAP (PEAP) | 7.5 | 0.0106 | | | [CVE-2023-21817](https://patchblox.com/security/data/cve/CVE-2023-21817.md) | High | Windows Kerberos | 7.8 | 0.0078 | | | [CVE-2023-21805](https://patchblox.com/security/data/cve/CVE-2023-21805.md) | High | Windows MSHTML Platform | 7.8 | 0.0074 | | | [CVE-2023-21802](https://patchblox.com/security/data/cve/CVE-2023-21802.md) | High | Microsoft Windows Codecs Library | 7.8 | 0.0064 | | | [CVE-2023-21820](https://patchblox.com/security/data/cve/CVE-2023-21820.md) | High | Windows Distributed File System (DFS) | 7.4 | 0.0064 | | | [CVE-2023-21804](https://patchblox.com/security/data/cve/CVE-2023-21804.md) | High | Microsoft Graphics Component | 7.8 | 0.0042 | | | [CVE-2023-21801](https://patchblox.com/security/data/cve/CVE-2023-21801.md) | High | Microsoft PostScript Printer Driver | 7.8 | 0.0041 | | | [CVE-2023-21693](https://patchblox.com/security/data/cve/CVE-2023-21693.md) | Routine | Microsoft PostScript Printer Driver | 5.7 | 0.0139 | | | [CVE-2023-21699](https://patchblox.com/security/data/cve/CVE-2023-21699.md) | Routine | Internet Storage Name Service | 5.3 | 0.0111 | | | [CVE-2023-21722](https://patchblox.com/security/data/cve/CVE-2023-21722.md) | Routine | .NET Framework | 5.0 | 0.0092 | | | [CVE-2023-21694](https://patchblox.com/security/data/cve/CVE-2023-21694.md) | Routine | Windows Fax and Scan Service | 6.8 | 0.0056 | | | [CVE-2023-21697](https://patchblox.com/security/data/cve/CVE-2023-21697.md) | Routine | Internet Storage Name Service | 6.2 | 0.0050 | | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo