Recommended way to fix vulnerabilities and CVE in Microsoft Windows Server 2019 Standard Evaluation

Question

Hello Folks,

I am using Microsoft Windows Server 2019 Standard Evaluation .

Recently, scanned this server and found the following vulnerabilities:

Critical count : 4

High count : 5

Medium count : 9

But the catch here is that in each critical count vulnerability there are multiple CVE

So, inspite of having 4 crititical vulnerability , I have 190 CVE vulnerability.

What is the recommended way to fix all these vulnerabilities?

Am I supposed to resolve each CVE separately or is there any other method .

Note: I am using Microsoft Catalog Update. It makes one package update manually. But I am facing an issue over there.

Please help me to resolve these issues.

Thanks.

Answer 1

June 14, 2022—KB5014692 (OS Build 17763.3046)
August 9, 2022—KB5016623 (OS Build 17763.3287)
September 13, 2022—KB5017315 (OS Build 17763.3406)
July 12, 2022—KB5015811 (OS Build 17763.3165)

Updates are now cumulative so the current monthly update contains new fixes plus all of those from previous monthly updates. So you're good to go. "update is not applicable" is normal and expected behavior when trying to install an older build rollup.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

What is the recommended way to fix all these vulnerabilities?

In general patch it fully.

As to the "not applicable" what is the current build number?