Microsoft · Security update · January 8, 2019
KB4480970: January 2019 security update
KB4480970, released January 8, 2019, fixes 17 CVEs across 8 products. 2 of them are being exploited (CVE-2019-0541); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now2 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product
CVEs closed
17
None rated Critical
Exploited
2
CVE-2019-0541
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.5320
98th percentile
Priority of the 17 CVEs
Patch now 2
Urgent 1
High 11
Routine 3
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2019-0541 | Internet Explorer | Remote Code Execution | 6.4 | 0.5320 | KEVExploited |
| Patch now | CVE-2019-0543 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0468 | KEVRansomwareExploited |
| Urgent | CVE-2019-0569 | Windows Kernel | Information Disclosure | 5.5 | 0.0185 | More likely |
| High | CVE-2019-0538 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.2042 | Exploitation Unlikely |
| High | CVE-2019-0577 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.1727 | Exploitation Unlikely |
| High | CVE-2019-0579 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.1727 | DisclosedExploitation Unlikely |
| High | CVE-2019-0580 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.1727 | Exploitation Unlikely |
| High | CVE-2019-0576 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.1702 | Exploitation Unlikely |
| High | CVE-2019-0583 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.1608 | Exploitation Unlikely |
| High | CVE-2019-0575 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.1360 | Exploitation Unlikely |
| High | CVE-2019-0578 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.1360 | Exploitation Unlikely |
| High | CVE-2019-0581 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.1360 | Exploitation Unlikely |
| High | CVE-2019-0584 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.1360 | Exploitation Unlikely |
| High | CVE-2019-0582 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.1231 | Exploitation Unlikely |
| Routine | CVE-2019-0536 | Windows Kernel | Information Disclosure | 4.7 | 0.0185 | Exploitation Less Likely |
| Routine | CVE-2019-0549 | Windows Kernel | Information Disclosure | 4.7 | 0.0185 | Exploitation Less Likely |
| Routine | CVE-2019-0554 | Windows Kernel | Information Disclosure | 4.7 | 0.0185 | Exploitation Less Likely |
Showing 1 to 17 of 17
1