Microsoft · Security update · January 8, 2019

KB4480962: January 2019 cumulative update for Windows 10 1507

KB4480962, released January 8, 2019, fixes 27 CVEs across 10 products. 2 of them are being exploited (CVE-2019-0541); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product
CVEs closed
27
2 rated Critical
Exploited
2
CVE-2019-0541
Exploitation more likely
8
Vendor assessment
Highest EPSS
0.8290
99th percentile

Priority of the 27 CVEs

Patch now 2 Urgent 8 High 14 Routine 3

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 for 32-bit Systems10240.18094
Internet Explorer 11 on Windows 10 for x64-based Systems10240.18094
Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems10240.18094
Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems10240.18094
Microsoft .NET Framework 4.6/4.6.1/4.6.2 on Windows 10 for 32-bit Systems10240.18094
Microsoft .NET Framework 4.6/4.6.1/4.6.2 on Windows 10 for x64-based Systems10240.18094
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems10240.18094
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems10240.18094
Windows 10 for 32-bit Systems10240.18094
Windows 10 for x64-based Systems10240.18094

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2019-0541 Internet Explorer Remote Code Execution 6.4 0.5320 KEVExploited
Patch now CVE-2019-0543 Microsoft Windows Elevation of Privilege 7.8 0.0468 KEVRansomwareExploited
Urgent CVE-2019-0539 Microsoft Scripting Engine Remote Code Execution 4.2 0.8290 More likely
Urgent CVE-2019-0567 Microsoft Scripting Engine Remote Code Execution 4.2 0.8013 More likely
Urgent CVE-2019-0572 Microsoft Windows Elevation of Privilege 7.8 0.2514 More likely
Urgent CVE-2019-0573 Microsoft Windows Elevation of Privilege 7.8 0.2014 More likely
Urgent CVE-2019-0574 Microsoft Windows Elevation of Privilege 7.8 0.1945 More likely
Urgent CVE-2019-0566 Microsoft Edge Elevation of Privilege 4.3 0.1862 More likely
Urgent CVE-2019-0552 Windows COM Elevation of Privilege 7.0 0.0254 More likely
Urgent CVE-2019-0569 Windows Kernel Information Disclosure 5.5 0.0185 More likely
High CVE-2019-0538 Microsoft JET Database Engine Remote Code Execution 7.8 0.2042 Exploitation Unlikely
High CVE-2019-0577 Microsoft JET Database Engine Remote Code Execution 7.8 0.1727 Exploitation Unlikely
High CVE-2019-0579 Microsoft JET Database Engine Remote Code Execution 7.8 0.1727 DisclosedExploitation Unlikely
High CVE-2019-0580 Microsoft JET Database Engine Remote Code Execution 7.8 0.1727 Exploitation Unlikely
High CVE-2019-0576 Microsoft JET Database Engine Remote Code Execution 7.8 0.1702 Exploitation Unlikely
High CVE-2019-0583 Microsoft JET Database Engine Remote Code Execution 7.8 0.1608 Exploitation Unlikely
High CVE-2019-0571 Microsoft Windows Elevation of Privilege 7.8 0.1585 Exploitation Less Likely
High CVE-2019-0575 Microsoft JET Database Engine Remote Code Execution 7.8 0.1360 Exploitation Unlikely
High CVE-2019-0578 Microsoft JET Database Engine Remote Code Execution 7.8 0.1360 Exploitation Unlikely
High CVE-2019-0581 Microsoft JET Database Engine Remote Code Execution 7.8 0.1360 Exploitation Unlikely
High CVE-2019-0584 Microsoft JET Database Engine Remote Code Execution 7.8 0.1360 Exploitation Unlikely
High CVE-2019-0582 Microsoft JET Database Engine Remote Code Execution 7.8 0.1231 Exploitation Unlikely
High CVE-2019-0545 .NET Framework Information Disclosure n/a 0.0961 Exploitation Less Likely
High CVE-2019-0570 Microsoft Windows Elevation of Privilege 7.8 0.0300 Exploitation Less Likely
Routine CVE-2019-0536 Windows Kernel Information Disclosure 4.7 0.0185 Exploitation Less Likely
Showing 1 to 25 of 27 1Next