# KB4019473: May 2017 cumulative update for Windows 10 1511 KB4019473, released May 9, 2017, fixes 37 CVEs across 10 products. 3 of them are being exploited (CVE-2017-0213); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb4019473 - Platform: Microsoft - Released: May 9, 2017 - Priority: Patch now (Closes CVE-2017-0213, exploited (CISA KEV, ransomware)) - CVEs: 37, exploited: 3, on CISA KEV: 3 - Vendor advisory: https://support.microsoft.com/help/4019473 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-10-version-1511-for-32-bit-systems.md) | | 10586.916 | | [Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-10-version-1511-for-x64-based-systems.md) | | 10586.916 | | [Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-on-windows-10-version-1511-for-32-bit-systems.md) | | 10586.916 | | [Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-on-windows-10-version-1511-for-x64-based-systems.md) | | 10586.916 | | [Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-4.6.1-on-windows-10-version-1511-for-32-bit-systems.md) | | 10586.916 | | [Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-4.6.1-on-windows-10-version-1511-for-x64-based-systems.md) | | 10586.916 | | [Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/microsoft-edge-edgehtml-based-on-windows-10-version-1511-for-32-bit-systems.md) | | 10586.916 | | [Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-edge-edgehtml-based-on-windows-10-version-1511-for-x64-based-systems.md) | | 10586.916 | | [Windows 10 Version 1511 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1511-for-32-bit-systems.md) | | 10586.916 | | [Windows 10 Version 1511 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1511-for-x64-based-systems.md) | | 10586.916 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2017-0213](https://patchblox.com/security/data/cve/CVE-2017-0213.md) | Patch now | Windows COM | 6.7 | 0.8426 | CISA KEV, Ransomware | | [CVE-2017-0222](https://patchblox.com/security/data/cve/CVE-2017-0222.md) | Patch now | Internet Explorer | 6.0 | 0.2965 | CISA KEV | | [CVE-2017-0263](https://patchblox.com/security/data/cve/CVE-2017-0263.md) | Patch now | Windows Kernel-Mode Drivers | 7.8 | 0.1003 | CISA KEV | | [CVE-2017-0234](https://patchblox.com/security/data/cve/CVE-2017-0234.md) | Urgent | Microsoft Scripting Engine | 4.2 | 0.3812 | More likely | | [CVE-2017-0266](https://patchblox.com/security/data/cve/CVE-2017-0266.md) | Urgent | Microsoft Edge | 4.2 | 0.3582 | More likely | | [CVE-2017-0236](https://patchblox.com/security/data/cve/CVE-2017-0236.md) | Urgent | Microsoft Scripting Engine | 4.2 | 0.3158 | More likely | | [CVE-2017-0238](https://patchblox.com/security/data/cve/CVE-2017-0238.md) | Urgent | Microsoft Scripting Engine | 4.2 | 0.1807 | More likely | | [CVE-2017-0272](https://patchblox.com/security/data/cve/CVE-2017-0272.md) | Urgent | Windows SMB Server | 8.1 | 0.1712 | | | [CVE-2017-0240](https://patchblox.com/security/data/cve/CVE-2017-0240.md) | Urgent | Microsoft Edge | 4.2 | 0.1473 | More likely | | [CVE-2017-0227](https://patchblox.com/security/data/cve/CVE-2017-0227.md) | Urgent | Microsoft Edge | 4.2 | 0.1379 | More likely | | [CVE-2017-0277](https://patchblox.com/security/data/cve/CVE-2017-0277.md) | Urgent | Windows SMB Server | 7.0 | 0.1085 | | | [CVE-2017-0278](https://patchblox.com/security/data/cve/CVE-2017-0278.md) | Urgent | Windows SMB Server | 7.0 | 0.1085 | | | [CVE-2017-0279](https://patchblox.com/security/data/cve/CVE-2017-0279.md) | Urgent | Windows SMB Server | 7.0 | 0.1085 | | | [CVE-2017-0229](https://patchblox.com/security/data/cve/CVE-2017-0229.md) | Urgent | Microsoft Scripting Engine | 4.2 | 0.1070 | Disclosed | | [CVE-2017-0226](https://patchblox.com/security/data/cve/CVE-2017-0226.md) | Urgent | Internet Explorer | 7.5 | 0.0982 | More likely | | [CVE-2017-0214](https://patchblox.com/security/data/cve/CVE-2017-0214.md) | Urgent | Windows COM | 6.7 | 0.0346 | More likely | | [CVE-2017-0233](https://patchblox.com/security/data/cve/CVE-2017-0233.md) | Urgent | Microsoft Edge | 4.2 | 0.0308 | More likely | | [CVE-2017-0241](https://patchblox.com/security/data/cve/CVE-2017-0241.md) | Urgent | Microsoft Edge | 3.1 | 0.0287 | Disclosed | | [CVE-2017-0077](https://patchblox.com/security/data/cve/CVE-2017-0077.md) | Urgent | Microsoft Graphics Component | 4.7 | 0.0154 | More likely | | [CVE-2017-0271](https://patchblox.com/security/data/cve/CVE-2017-0271.md) | High | Windows SMB Server | 7.0 | 0.1327 | | | [CVE-2017-0267](https://patchblox.com/security/data/cve/CVE-2017-0267.md) | High | Windows SMB Server | 7.0 | 0.1268 | | | [CVE-2017-0275](https://patchblox.com/security/data/cve/CVE-2017-0275.md) | High | Windows SMB Server | 7.0 | 0.0761 | | | [CVE-2017-0268](https://patchblox.com/security/data/cve/CVE-2017-0268.md) | High | Windows SMB Server | 7.0 | 0.0724 | | | [CVE-2017-0270](https://patchblox.com/security/data/cve/CVE-2017-0270.md) | High | Windows SMB Server | 7.0 | 0.0724 | | | [CVE-2017-0276](https://patchblox.com/security/data/cve/CVE-2017-0276.md) | High | Windows SMB Server | 7.0 | 0.0724 | | | [CVE-2017-0280](https://patchblox.com/security/data/cve/CVE-2017-0280.md) | High | Windows SMB Server | 7.0 | 0.0717 | | | [CVE-2017-0274](https://patchblox.com/security/data/cve/CVE-2017-0274.md) | High | Windows SMB Server | 7.0 | 0.0704 | | | [CVE-2017-0269](https://patchblox.com/security/data/cve/CVE-2017-0269.md) | High | Windows SMB Server | 7.0 | 0.0647 | | | [CVE-2017-0273](https://patchblox.com/security/data/cve/CVE-2017-0273.md) | High | Windows SMB Server | 8.1 | 0.0609 | | | [CVE-2017-0248](https://patchblox.com/security/data/cve/CVE-2017-0248.md) | High | .NET Framework | n/a | 0.0551 | | | [CVE-2017-0212](https://patchblox.com/security/data/cve/CVE-2017-0212.md) | High | Windows SMB Server | 7.6 | 0.0114 | | | [CVE-2017-0190](https://patchblox.com/security/data/cve/CVE-2017-0190.md) | Routine | Microsoft Graphics Component | 4.2 | 0.4346 | | | [CVE-2017-0259](https://patchblox.com/security/data/cve/CVE-2017-0259.md) | Routine | Windows Kernel | 4.7 | 0.0966 | | | [CVE-2017-0258](https://patchblox.com/security/data/cve/CVE-2017-0258.md) | Routine | Windows Kernel | 4.7 | 0.0736 | | | [CVE-2017-0064](https://patchblox.com/security/data/cve/CVE-2017-0064.md) | Routine | Internet Explorer | 2.4 | 0.0520 | Disclosed | | [CVE-2017-0231](https://patchblox.com/security/data/cve/CVE-2017-0231.md) | Routine | Microsoft Edge | 4.3 | 0.0367 | Disclosed | | [CVE-2017-0246](https://patchblox.com/security/data/cve/CVE-2017-0246.md) | Routine | Microsoft Graphics Component | 4.7 | 0.0130 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo