Hello
I would like to suggest if the servers Do not have Internet then you can use WSUS to push the updates to servers.
Also , you can download and Install each updates manually KB number suggested by vulnerabilities report from https://www.catalog.update.microsoft.com/
If the reply was helpful, please don’t forget to upvote or accept as answer.