Microsoft · Security update · January 8, 2019

KB4480973: January 2019 cumulative update for Windows 10 1703

KB4480973, released January 8, 2019, fixes 29 CVEs across 10 products. 2 of them are being exploited (CVE-2019-0541); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product
CVEs closed
29
3 rated Critical
Exploited
2
CVE-2019-0541
Exploitation more likely
8
Vendor assessment
Highest EPSS
0.8290
99th percentile

Priority of the 29 CVEs

Patch now 2 Urgent 9 High 14 Routine 4

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems15063.1563
Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems15063.1563
Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for 32-bit Systems15063.1563
Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for x64-based Systems15063.1563
Microsoft .NET Framework 4.7/4.7.1/4.7.2 on Windows 10 Version 1703 for 32-bit Systems15063.1563
Microsoft .NET Framework 4.7/4.7.1/4.7.2 on Windows 10 Version 1703 for x64-based Systems15063.1563
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems15063.1563
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems15063.1563
Windows 10 Version 1703 for 32-bit Systems15063.1563
Windows 10 Version 1703 for x64-based Systems15063.1563

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2019-0541 Internet Explorer Remote Code Execution 6.4 0.5320 KEVExploited
Patch now CVE-2019-0543 Microsoft Windows Elevation of Privilege 7.8 0.0468 KEVRansomwareExploited
Urgent CVE-2019-0539 Microsoft Scripting Engine Remote Code Execution 4.2 0.8290 More likely
Urgent CVE-2019-0567 Microsoft Scripting Engine Remote Code Execution 4.2 0.8013 More likely
Urgent CVE-2019-0572 Microsoft Windows Elevation of Privilege 7.8 0.2514 More likely
Urgent CVE-2019-0573 Microsoft Windows Elevation of Privilege 7.8 0.2014 More likely
Urgent CVE-2019-0574 Microsoft Windows Elevation of Privilege 7.8 0.1945 More likely
Urgent CVE-2019-0566 Microsoft Edge Elevation of Privilege 4.3 0.1862 More likely
Urgent CVE-2019-0551 Windows Hyper-V Remote Code Execution 7.6 0.0446 Exploitation Less Likely
Urgent CVE-2019-0552 Windows COM Elevation of Privilege 7.0 0.0254 More likely
Urgent CVE-2019-0569 Windows Kernel Information Disclosure 5.5 0.0185 More likely
High CVE-2019-0538 Microsoft JET Database Engine Remote Code Execution 7.8 0.2042 Exploitation Unlikely
High CVE-2019-0577 Microsoft JET Database Engine Remote Code Execution 7.8 0.1727 Exploitation Unlikely
High CVE-2019-0579 Microsoft JET Database Engine Remote Code Execution 7.8 0.1727 DisclosedExploitation Unlikely
High CVE-2019-0580 Microsoft JET Database Engine Remote Code Execution 7.8 0.1727 Exploitation Unlikely
High CVE-2019-0576 Microsoft JET Database Engine Remote Code Execution 7.8 0.1702 Exploitation Unlikely
High CVE-2019-0583 Microsoft JET Database Engine Remote Code Execution 7.8 0.1608 Exploitation Unlikely
High CVE-2019-0571 Microsoft Windows Elevation of Privilege 7.8 0.1585 Exploitation Less Likely
High CVE-2019-0575 Microsoft JET Database Engine Remote Code Execution 7.8 0.1360 Exploitation Unlikely
High CVE-2019-0578 Microsoft JET Database Engine Remote Code Execution 7.8 0.1360 Exploitation Unlikely
High CVE-2019-0581 Microsoft JET Database Engine Remote Code Execution 7.8 0.1360 Exploitation Unlikely
High CVE-2019-0584 Microsoft JET Database Engine Remote Code Execution 7.8 0.1360 Exploitation Unlikely
High CVE-2019-0582 Microsoft JET Database Engine Remote Code Execution 7.8 0.1231 Exploitation Unlikely
High CVE-2019-0545 .NET Framework Information Disclosure n/a 0.0961 Exploitation Less Likely
High CVE-2019-0570 Microsoft Windows Elevation of Privilege 7.8 0.0300 Exploitation Less Likely
Showing 1 to 25 of 29 1Next