Follow these steps, rebooting after EACH step and running from an ELEVATED PROMPT.
Install .net 4.8:
https://learn.microsoft.com/en-us/exchange/plan-and-deploy/supportability-matrix?view=exchserver-2019#microsoft-net-framework
Run each step separately: ( not absolutely required in a single forest architecture. I always recommend it though. Otherwise run setup and these steps will be done automatically if you have the correct perms:
https://learn.microsoft.com/en-us/exchange/plan-and-deploy/prepare-ad-and-domains?view=exchserver-2016
Setup.exe /IAcceptExchangeServerLicenseTerms /PrepareSchema
Setup.exe /IAcceptExchangeServerLicenseTerms /PrepareAD
Setup.exe /IAcceptExchangeServerLicenseTerms /PrepareAllDomains
Then install CU20:
https://techcommunity.microsoft.com/t5/exchange-team-blog/released-march-2021-quarterly-exchange-updates/ba-p/2205283
then install the post CU20 security patch