{
  "fix": "KB4503285",
  "url": "https://patchblox.com/security/fix/microsoft/kb4503285",
  "summary": "KB4503285, released June 11, 2019, fixes 39 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "microsoft",
  "type": "kb",
  "releaseKind": "Security",
  "title": "June 2019 security update",
  "released": "2019-06-11T07:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2019-0888, rated Critical",
  "supported": true,
  "cveCount": 39,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.48043,
  "maxCvss": 8.8,
  "vendorAdvisory": "https://support.microsoft.com/help/4503285",
  "appliesTo": [
    {
      "product": "Internet Explorer 10 on Windows Server 2012",
      "productUrl": "https://patchblox.com/security/product/microsoft/internet-explorer-10-on-windows-server-2012",
      "fixedVersion": "",
      "supported": false
    },
    {
      "product": "Windows Server 2012",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-server-2012",
      "fixedVersion": "",
      "supported": true
    },
    {
      "product": "Windows Server 2012 (Server Core installation)",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-server-2012-server-core-installation",
      "fixedVersion": "",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2019-0888",
      "url": "https://patchblox.com/security/cve/CVE-2019-0888",
      "title": "ActiveX Data Objects (ADO) Remote Code Execution Vulnerability",
      "component": "Microsoft Windows",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 8.8,
      "epss": 0.11128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0988",
      "url": "https://patchblox.com/security/cve/CVE-2019-0988",
      "title": "Scripting Engine Memory Corruption Vulnerability",
      "component": "Microsoft Scripting Engine",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.05738,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0920",
      "url": "https://patchblox.com/security/cve/CVE-2019-0920",
      "title": "Scripting Engine Memory Corruption Vulnerability",
      "component": "Microsoft Scripting Engine",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 7.5,
      "epss": 0.05524,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1025",
      "url": "https://patchblox.com/security/cve/CVE-2019-1025",
      "title": "Windows Denial of Service Vulnerability",
      "component": "Microsoft Windows",
      "impact": "Denial of Service",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.05394,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0722",
      "url": "https://patchblox.com/security/cve/CVE-2019-0722",
      "title": "Windows Hyper-V Remote Code Execution Vulnerability",
      "component": "Microsoft Windows",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 8.8,
      "epss": 0.04716,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1005",
      "url": "https://patchblox.com/security/cve/CVE-2019-1005",
      "title": "Scripting Engine Memory Corruption Vulnerability",
      "component": "VBScript",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Low",
      "cvss": 6.4,
      "epss": 0.03345,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1055",
      "url": "https://patchblox.com/security/cve/CVE-2019-1055",
      "title": "Scripting Engine Memory Corruption Vulnerability",
      "component": "Microsoft Scripting Engine",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Moderate",
      "cvss": 6.4,
      "epss": 0.03345,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1038",
      "url": "https://patchblox.com/security/cve/CVE-2019-1038",
      "title": "Microsoft Browser Memory Corruption Vulnerability",
      "component": "Microsoft Browsers",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Moderate",
      "cvss": 6.4,
      "epss": 0.03316,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1080",
      "url": "https://patchblox.com/security/cve/CVE-2019-1080",
      "title": "Scripting Engine Memory Corruption Vulnerability",
      "component": "Microsoft Scripting Engine",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Moderate",
      "cvss": 6.4,
      "epss": 0.03316,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0943",
      "url": "https://patchblox.com/security/cve/CVE-2019-0943",
      "title": "Windows ALPC Elevation of Privilege Vulnerability",
      "component": "Microsoft Windows",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.02373,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1081",
      "url": "https://patchblox.com/security/cve/CVE-2019-1081",
      "title": "Microsoft Browser Information Disclosure Vulnerability",
      "component": "Microsoft Browsers",
      "impact": "Information Disclosure",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 4.2,
      "epss": 0.02335,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0986",
      "url": "https://patchblox.com/security/cve/CVE-2019-0986",
      "title": "Windows User Profile Service Elevation of Privilege Vulnerability",
      "component": "Windows Shell",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 6.3,
      "epss": 0.02066,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0620",
      "url": "https://patchblox.com/security/cve/CVE-2019-0620",
      "title": "Windows Hyper-V Remote Code Execution Vulnerability",
      "component": "Windows Hyper-V",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 7.6,
      "epss": 0.01441,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1053",
      "url": "https://patchblox.com/security/cve/CVE-2019-1053",
      "title": "Windows Shell Elevation of Privilege Vulnerability",
      "component": "Windows Shell",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 6.3,
      "epss": 0.01323,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": true
    },
    {
      "cveId": "CVE-2019-0984",
      "url": "https://patchblox.com/security/cve/CVE-2019-0984",
      "title": "Windows Common Log File System Driver Elevation of Privilege Vulnerability",
      "component": "Microsoft Windows",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00903,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1017",
      "url": "https://patchblox.com/security/cve/CVE-2019-1017",
      "title": "Win32k Elevation of Privilege Vulnerability",
      "component": "Windows Kernel",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00903,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1019",
      "url": "https://patchblox.com/security/cve/CVE-2019-1019",
      "title": "Microsoft Windows Security Feature Bypass Vulnerability",
      "component": "Windows NTLM",
      "impact": "Security Feature Bypass",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.5,
      "epss": 0.15115,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0906",
      "url": "https://patchblox.com/security/cve/CVE-2019-0906",
      "title": "Jet Database Engine Remote Code Execution Vulnerability",
      "component": "Microsoft JET Database Engine",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.05713,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0908",
      "url": "https://patchblox.com/security/cve/CVE-2019-0908",
      "title": "Jet Database Engine Remote Code Execution Vulnerability",
      "component": "Microsoft JET Database Engine",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.04563,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0904",
      "url": "https://patchblox.com/security/cve/CVE-2019-0904",
      "title": "Jet Database Engine Remote Code Execution Vulnerability",
      "component": "Microsoft JET Database Engine",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.04071,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0905",
      "url": "https://patchblox.com/security/cve/CVE-2019-0905",
      "title": "Jet Database Engine Remote Code Execution Vulnerability",
      "component": "Microsoft JET Database Engine",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.04071,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0907",
      "url": "https://patchblox.com/security/cve/CVE-2019-0907",
      "title": "Jet Database Engine Remote Code Execution Vulnerability",
      "component": "Microsoft JET Database Engine",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.04071,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0974",
      "url": "https://patchblox.com/security/cve/CVE-2019-0974",
      "title": "Jet Database Engine Remote Code Execution Vulnerability",
      "component": "Microsoft JET Database Engine",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.04071,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0909",
      "url": "https://patchblox.com/security/cve/CVE-2019-0909",
      "title": "Jet Database Engine Remote Code Execution Vulnerability",
      "component": "Microsoft JET Database Engine",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.036,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0941",
      "url": "https://patchblox.com/security/cve/CVE-2019-0941",
      "title": "Microsoft IIS Server Denial of Service Vulnerability",
      "component": "Windows IIS",
      "impact": "Denial of Service",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.03041,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0973",
      "url": "https://patchblox.com/security/cve/CVE-2019-0973",
      "title": "Windows Installer Elevation of Privilege Vulnerability",
      "component": "Windows Installer",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.01055,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": true
    },
    {
      "cveId": "CVE-2019-1045",
      "url": "https://patchblox.com/security/cve/CVE-2019-1045",
      "title": "Windows Network File System Elevation of Privilege Vulnerability",
      "component": "Microsoft Windows",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.01003,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1014",
      "url": "https://patchblox.com/security/cve/CVE-2019-1014",
      "title": "Win32k Elevation of Privilege Vulnerability",
      "component": "Windows Kernel",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00903,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1040",
      "url": "https://patchblox.com/security/cve/CVE-2019-1040",
      "title": "Windows NTLM Tampering Vulnerability",
      "component": "Windows Authentication Methods",
      "impact": "Tampering",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.3,
      "epss": 0.48043,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0948",
      "url": "https://patchblox.com/security/cve/CVE-2019-0948",
      "title": "Windows Event Viewer Information Disclosure Vulnerability",
      "component": "Microsoft Windows",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.7,
      "epss": 0.12672,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0972",
      "url": "https://patchblox.com/security/cve/CVE-2019-0972",
      "title": "Local Security Authority Subsystem Service Denial of Service Vulnerability",
      "component": "Kerberos",
      "impact": "Denial of Service",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.05786,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1010",
      "url": "https://patchblox.com/security/cve/CVE-2019-1010",
      "title": "Windows GDI Information Disclosure Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 4.7,
      "epss": 0.04314,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1012",
      "url": "https://patchblox.com/security/cve/CVE-2019-1012",
      "title": "Windows GDI Information Disclosure Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 4.7,
      "epss": 0.04314,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1015",
      "url": "https://patchblox.com/security/cve/CVE-2019-1015",
      "title": "Windows GDI Information Disclosure Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 4.7,
      "epss": 0.04314,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1046",
      "url": "https://patchblox.com/security/cve/CVE-2019-1046",
      "title": "Windows GDI Information Disclosure Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 4.7,
      "epss": 0.04314,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1050",
      "url": "https://patchblox.com/security/cve/CVE-2019-1050",
      "title": "Windows GDI Information Disclosure Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 4.7,
      "epss": 0.04314,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1043",
      "url": "https://patchblox.com/security/cve/CVE-2019-1043",
      "title": "Comctl32 Remote Code Execution Vulnerability",
      "component": "Microsoft Windows",
      "impact": "Remote Code Execution",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.4,
      "epss": 0.03029,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-0713",
      "url": "https://patchblox.com/security/cve/CVE-2019-0713",
      "title": "Windows Hyper-V Denial of Service Vulnerability",
      "component": "Microsoft Windows",
      "impact": "Denial of Service",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.8,
      "epss": 0.01879,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-1039",
      "url": "https://patchblox.com/security/cve/CVE-2019-1039",
      "title": "Windows Kernel Information Disclosure Vulnerability",
      "component": "Windows Kernel",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.01352,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T06:34:28Z"
}