Microsoft · Security update · January 8, 2019

KB4480966: January 2019 cumulative update for Windows 10 1803

KB4480966, released January 8, 2019, fixes 33 CVEs across 20 products. 2 of them are being exploited (CVE-2019-0541); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product
CVEs closed
33
7 rated Critical
Exploited
2
CVE-2019-0541
Exploitation more likely
10
Vendor assessment
Highest EPSS
0.8290
99th percentile

Priority of the 33 CVEs

Patch now 2 Urgent 13 High 14 Routine 4

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems17134.523
Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems17134.523
Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems17134.523
Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for 32-bit Systems17134.523
Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for ARM64-based Systems17134.523
Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for x64-based Systems17134.523
Microsoft .NET Framework 3.5 on Windows Server, version 1709 (Server Core Installation)17134.523
Microsoft .NET Framework 3.5 on Windows Server, version 1803 (Server Core Installation)17134.523
Microsoft .NET Framework 4.7.1/4.7.2 on Windows Server, version 1709 (Server Core Installation)17134.523
Microsoft .NET Framework 4.7.2 on Windows 10 Version 1803 for 32-bit Systems17134.523
Microsoft .NET Framework 4.7.2 on Windows 10 Version 1803 for ARM64-based Systems17134.523
Microsoft .NET Framework 4.7.2 on Windows 10 Version 1803 for x64-based Systems17134.523
Microsoft .NET Framework 4.7.2 on Windows Server, version 1803 (Server Core Installation)17134.523
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems17134.523
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems17134.523
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems17134.523
Windows 10 Version 1803 for 32-bit Systems17134.523
Windows 10 Version 1803 for ARM64-based Systems17134.523
Windows 10 Version 1803 for x64-based Systems17134.523
Windows Server, version 1803 (Server Core Installation)17134.523

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2019-0541 Internet Explorer Remote Code Execution 6.4 0.5320 KEVExploited
Patch now CVE-2019-0543 Microsoft Windows Elevation of Privilege 7.8 0.0468 KEVRansomwareExploited
Urgent CVE-2019-0539 Microsoft Scripting Engine Remote Code Execution 4.2 0.8290 More likely
Urgent CVE-2019-0567 Microsoft Scripting Engine Remote Code Execution 4.2 0.8013 More likely
Urgent CVE-2019-0547 Windows DHCP Client Remote Code Execution 9.8 0.7137 N/A
Urgent CVE-2019-0568 Microsoft Scripting Engine Remote Code Execution 4.2 0.6946 More likely
Urgent CVE-2019-0572 Microsoft Windows Elevation of Privilege 7.8 0.2514 More likely
Urgent CVE-2019-0573 Microsoft Windows Elevation of Privilege 7.8 0.2014 More likely
Urgent CVE-2019-0574 Microsoft Windows Elevation of Privilege 7.8 0.1945 More likely
Urgent CVE-2019-0566 Microsoft Edge Elevation of Privilege 4.3 0.1862 More likely
Urgent CVE-2019-0565 Microsoft Edge Remote Code Execution 4.2 0.0955 More likely
Urgent CVE-2019-0550 Windows Hyper-V Remote Code Execution 7.6 0.0446 Exploitation Less Likely
Urgent CVE-2019-0551 Windows Hyper-V Remote Code Execution 7.6 0.0446 Exploitation Less Likely
Urgent CVE-2019-0552 Windows COM Elevation of Privilege 7.0 0.0254 More likely
Urgent CVE-2019-0569 Windows Kernel Information Disclosure 5.5 0.0185 More likely
High CVE-2019-0538 Microsoft JET Database Engine Remote Code Execution 7.8 0.2042 Exploitation Unlikely
High CVE-2019-0577 Microsoft JET Database Engine Remote Code Execution 7.8 0.1727 Exploitation Unlikely
High CVE-2019-0579 Microsoft JET Database Engine Remote Code Execution 7.8 0.1727 DisclosedExploitation Unlikely
High CVE-2019-0580 Microsoft JET Database Engine Remote Code Execution 7.8 0.1727 Exploitation Unlikely
High CVE-2019-0576 Microsoft JET Database Engine Remote Code Execution 7.8 0.1702 Exploitation Unlikely
High CVE-2019-0583 Microsoft JET Database Engine Remote Code Execution 7.8 0.1608 Exploitation Unlikely
High CVE-2019-0571 Microsoft Windows Elevation of Privilege 7.8 0.1585 Exploitation Less Likely
High CVE-2019-0575 Microsoft JET Database Engine Remote Code Execution 7.8 0.1360 Exploitation Unlikely
High CVE-2019-0578 Microsoft JET Database Engine Remote Code Execution 7.8 0.1360 Exploitation Unlikely
High CVE-2019-0581 Microsoft JET Database Engine Remote Code Execution 7.8 0.1360 Exploitation Unlikely
Showing 1 to 25 of 33 1Next