# KB4519976: October 2019 security update KB4519976, released October 8, 2019, fixes 27 CVEs across 8 products. 2 of them are being exploited (CVE-2019-1367); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb4519976 - Platform: Microsoft - Released: Oct 8, 2019 - Priority: Patch now (Closes CVE-2019-1367, exploited (CISA KEV, ransomware)) - CVEs: 27, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://support.microsoft.com/help/4519976 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-7-for-32-bit-systems-service-pack-1.md) | | | | [Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-7-for-x64-based-systems-service-pack-1.md) | | | | [Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-server-2008-r2-for-x64-based-systems-service-pack-1.md) | | | | [Windows 7 for 32-bit Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-7-for-32-bit-systems-service-pack-1.md) | | | | [Windows 7 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-7-for-x64-based-systems-service-pack-1.md) | | | | [Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-itanium-based-systems-service-pack-1.md) | | | | [Windows Server 2008 R2 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1.md) | | | | [Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2019-1367](https://patchblox.com/security/data/cve/CVE-2019-1367.md) | Patch now | Microsoft Scripting Engine | 6.4 | 0.5245 | CISA KEV, Ransomware | | [CVE-2019-1315](https://patchblox.com/security/data/cve/CVE-2019-1315.md) | Patch now | Microsoft Windows | 7.8 | 0.0348 | CISA KEV, Ransomware | | [CVE-2019-1333](https://patchblox.com/security/data/cve/CVE-2019-1333.md) | Urgent | Windows RDP | 7.5 | 0.1598 | More likely | | [CVE-2019-1192](https://patchblox.com/security/data/cve/CVE-2019-1192.md) | Urgent | Microsoft Browsers | 2.4 | 0.0371 | More likely | | [CVE-2019-1341](https://patchblox.com/security/data/cve/CVE-2019-1341.md) | Urgent | Microsoft Windows | 7.8 | 0.0109 | More likely | | [CVE-2019-1358](https://patchblox.com/security/data/cve/CVE-2019-1358.md) | High | Microsoft JET Database Engine | 7.8 | 0.7593 | | | [CVE-2019-1359](https://patchblox.com/security/data/cve/CVE-2019-1359.md) | High | Microsoft JET Database Engine | 7.8 | 0.1927 | | | [CVE-2019-1326](https://patchblox.com/security/data/cve/CVE-2019-1326.md) | High | Windows RDP | 7.5 | 0.0646 | | | [CVE-2019-1365](https://patchblox.com/security/data/cve/CVE-2019-1365.md) | High | Windows IIS | 7.5 | 0.0435 | | | [CVE-2019-1318](https://patchblox.com/security/data/cve/CVE-2019-1318.md) | High | Microsoft Windows | 7.7 | 0.0352 | | | [CVE-2019-1364](https://patchblox.com/security/data/cve/CVE-2019-1364.md) | High | Microsoft Graphics Component | 7.0 | 0.0288 | | | [CVE-2019-1362](https://patchblox.com/security/data/cve/CVE-2019-1362.md) | High | Microsoft Graphics Component | 7.0 | 0.0155 | | | [CVE-2019-1339](https://patchblox.com/security/data/cve/CVE-2019-1339.md) | High | Microsoft Windows | 7.8 | 0.0132 | | | [CVE-2019-1342](https://patchblox.com/security/data/cve/CVE-2019-1342.md) | High | Microsoft Windows | 7.0 | 0.0118 | | | [CVE-2019-1319](https://patchblox.com/security/data/cve/CVE-2019-1319.md) | High | Microsoft Windows | 7.0 | 0.0097 | | | [CVE-2019-1454](https://patchblox.com/security/data/cve/CVE-2019-1454.md) | High | Microsoft Windows | n/a | 0.0064 | | | [CVE-2019-1166](https://patchblox.com/security/data/cve/CVE-2019-1166.md) | Routine | Windows NTLM | 5.9 | 0.6811 | | | [CVE-2019-1346](https://patchblox.com/security/data/cve/CVE-2019-1346.md) | Routine | Microsoft Windows | 5.7 | 0.1093 | | | [CVE-2019-1371](https://patchblox.com/security/data/cve/CVE-2019-1371.md) | Routine | Internet Explorer | 6.4 | 0.0740 | | | [CVE-2019-1361](https://patchblox.com/security/data/cve/CVE-2019-1361.md) | Routine | Microsoft Graphics Component | 5.5 | 0.0690 | | | [CVE-2019-1238](https://patchblox.com/security/data/cve/CVE-2019-1238.md) | Routine | Microsoft Scripting Engine | 6.4 | 0.0586 | | | [CVE-2019-1338](https://patchblox.com/security/data/cve/CVE-2019-1338.md) | Routine | Microsoft Windows | 5.3 | 0.0356 | | | [CVE-2019-1344](https://patchblox.com/security/data/cve/CVE-2019-1344.md) | Routine | Microsoft Windows | 5.5 | 0.0307 | | | [CVE-2019-0608](https://patchblox.com/security/data/cve/CVE-2019-0608.md) | Routine | Microsoft Browsers | 2.4 | 0.0235 | | | [CVE-2019-1357](https://patchblox.com/security/data/cve/CVE-2019-1357.md) | Routine | Microsoft Browsers | 3.5 | 0.0229 | | | [CVE-2019-1363](https://patchblox.com/security/data/cve/CVE-2019-1363.md) | Routine | Microsoft Graphics Component | 5.5 | 0.0216 | | | [CVE-2019-1325](https://patchblox.com/security/data/cve/CVE-2019-1325.md) | Routine | Microsoft Windows | 5.5 | 0.0144 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo