Microsoft · Security update · December 14, 2021

KB5008212: December 2021 cumulative update for Windows 10 2004

KB5008212, released December 14, 2021, fixes 32 CVEs across 13 products. 2 of them are being exploited (CVE-2021-34527); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEVKnown ransomware use5 publicly disclosed
CVEs closed
32
4 rated Critical
Exploited
2
CVE-2021-34527
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.9979
99th percentile

Priority of the 32 CVEs

Patch now 2 Urgent 6 High 17 Routine 7

Applies to

Product
Windows 10 Version 2004 for 32-bit Systems
Windows 10 Version 2004 for ARM64-based Systems
Windows 10 Version 2004 for x64-based Systems
Windows 10 Version 20H2 for 32-bit Systems
Windows 10 Version 20H2 for ARM64-based Systems
Windows 10 Version 21H1 for 32-bit Systems
Windows 10 Version 21H1 for ARM64-based Systems
Windows 10 Version 21H1 for x64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows Server, version 2004 (Server Core installation)
Windows Server, version 20H2 (Server Core Installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2021-34527 Windows Print Spooler Components Remote Code Execution 8.8 0.9979 KEVRansomwareDisclosedExploited
Patch now CVE-2021-43226 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0328 KEVRansomwareExploited
Urgent CVE-2021-43883 Windows Installer Elevation of Privilege 7.8 0.1215 DisclosedMore likely
Urgent CVE-2021-43217 Windows Encrypting File System (EFS) Remote Code Execution 8.1 0.0652 Exploitation Less Likely
Urgent CVE-2021-43215 Internet Storage Name Service Remote Code Execution 9.8 0.0287 More likely
Urgent CVE-2021-43233 Remote Desktop Client Remote Code Execution 7.5 0.0236 More likely
Urgent CVE-2021-41333 Windows Print Spooler Components Elevation of Privilege 7.8 0.0108 DisclosedMore likely
Urgent CVE-2021-43207 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0068 More likely
High CVE-2021-43893 Windows Encrypting File System (EFS) Elevation of Privilege 7.5 0.0672 DisclosedExploitation Less Likely
High CVE-2021-43228 Windows SymCrypt Denial of Service 7.5 0.0387 Exploitation Less Likely
High CVE-2021-43219 Windows DirectX Denial of Service 7.4 0.0387 Exploitation Less Likely
High CVE-2021-43222 Windows Message Queuing Information Disclosure 7.5 0.0317 Exploitation Less Likely
High CVE-2021-43236 Windows Message Queuing Information Disclosure 7.5 0.0317 Exploitation Less Likely
High CVE-2021-43232 Windows Event Tracing Remote Code Execution 7.8 0.0218 Exploitation Less Likely
High CVE-2021-43234 Role: Windows Fax Service Remote Code Execution 7.8 0.0218 Exploitation Less Likely
High CVE-2021-43229 Windows NTFS Elevation of Privilege 7.8 0.0179 Exploitation Less Likely
High CVE-2021-43237 Windows Update Stack Elevation of Privilege 7.8 0.0107 Exploitation Less Likely
High CVE-2021-43247 Windows TCP/IP Elevation of Privilege 7.8 0.0092 Exploitation Less Likely
High CVE-2021-43238 Windows Remote Access Connection Manager Elevation of Privilege 7.8 0.0091 Exploitation Less Likely
High CVE-2021-43231 Windows NTFS Elevation of Privilege 7.8 0.0072 Exploitation Less Likely
High CVE-2021-43230 Windows NTFS Elevation of Privilege 7.8 0.0057 Exploitation Less Likely
High CVE-2021-43240 Windows NTFS Elevation of Privilege 7.8 0.0057 DisclosedExploitation Less Likely
High CVE-2021-43239 Windows Update Stack Elevation of Privilege 7.1 0.0056 Exploitation Less Likely
High CVE-2021-43223 Windows Remote Access Connection Manager Elevation of Privilege 7.8 0.0054 Exploitation Less Likely
High CVE-2021-43248 Microsoft Windows Codecs Library Elevation of Privilege 7.8 0.0054 Exploitation Less Likely
Showing 1 to 25 of 32 1Next