# KB5033383: December 2023 cumulative update for Windows Server 23H2

KB5033383, released December 12, 2023, fixes 19 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.584). None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/microsoft/kb5033383
- Platform: Microsoft
- Released: Dec 12, 2023
- Priority: Urgent (Closes CVE-2023-35628, exploitation more likely)
- CVEs: 19, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://support.microsoft.com/help/5033383

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Windows Server 2022, 23H2 Edition (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2022-23h2-edition-server-core-installation.md) |  | 25398.584 |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2023-35628](https://patchblox.com/security/data/cve/CVE-2023-35628.md) | Urgent | Windows MSHTML Platform | 8.1 | 0.9282 | More likely |
| [CVE-2023-36005](https://patchblox.com/security/data/cve/CVE-2023-36005.md) | Urgent | Windows Telephony Server | 7.5 | 0.2386 | More likely |
| [CVE-2023-35641](https://patchblox.com/security/data/cve/CVE-2023-35641.md) | Urgent | Windows Internet Connection Sharing (ICS) | 8.8 | 0.0722 | More likely |
| [CVE-2023-35631](https://patchblox.com/security/data/cve/CVE-2023-35631.md) | Urgent | Windows Win32K | 7.8 | 0.0655 | More likely |
| [CVE-2023-35644](https://patchblox.com/security/data/cve/CVE-2023-35644.md) | Urgent | Windows Kernel-Mode Drivers | 7.8 | 0.0625 | More likely |
| [CVE-2023-35630](https://patchblox.com/security/data/cve/CVE-2023-35630.md) | Urgent | Windows Internet Connection Sharing (ICS) | 8.8 | 0.0613 |  |
| [CVE-2023-36696](https://patchblox.com/security/data/cve/CVE-2023-36696.md) | Urgent | Windows Cloud Files Mini Filter Driver | 7.8 | 0.0086 | More likely |
| [CVE-2023-36011](https://patchblox.com/security/data/cve/CVE-2023-36011.md) | Urgent | Windows Win32K | 7.8 | 0.0071 | More likely |
| [CVE-2023-35638](https://patchblox.com/security/data/cve/CVE-2023-35638.md) | High | Windows DHCP Server | 7.5 | 0.0326 |  |
| [CVE-2023-35643](https://patchblox.com/security/data/cve/CVE-2023-35643.md) | High | Windows DHCP Server | 7.5 | 0.0265 |  |
| [CVE-2023-35639](https://patchblox.com/security/data/cve/CVE-2023-35639.md) | High | Windows ODBC Driver | 8.8 | 0.0237 |  |
| [CVE-2023-36006](https://patchblox.com/security/data/cve/CVE-2023-36006.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0189 |  |
| [CVE-2023-35622](https://patchblox.com/security/data/cve/CVE-2023-35622.md) | High | Microsoft Windows DNS | 7.5 | 0.0156 |  |
| [CVE-2023-36004](https://patchblox.com/security/data/cve/CVE-2023-36004.md) | High | Windows DPAPI (Data Protection Application Programming Interface) | 7.5 | 0.0137 |  |
| [CVE-2023-21740](https://patchblox.com/security/data/cve/CVE-2023-21740.md) | High | Windows Media | 7.8 | 0.0109 |  |
| [CVE-2023-20588](https://patchblox.com/security/data/cve/CVE-2023-20588.md) | Routine | Chipsets | 6.0 | 0.1115 | Disclosed |
| [CVE-2023-36003](https://patchblox.com/security/data/cve/CVE-2023-36003.md) | Routine | XAML Diagnostics | 6.7 | 0.0285 |  |
| [CVE-2023-36012](https://patchblox.com/security/data/cve/CVE-2023-36012.md) | Routine | Windows DHCP Server | 5.3 | 0.0200 |  |
| [CVE-2023-35642](https://patchblox.com/security/data/cve/CVE-2023-35642.md) | Routine | Windows Internet Connection Sharing (ICS) | 6.5 | 0.0128 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo