Microsoft · Security update · March 12, 2019

KB4489878: March 2019 security update

KB4489878, released March 12, 2019, fixes 32 CVEs across 8 products. 2 of them are being exploited (CVE-2019-0808); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEV2 publicly disclosedUnsupported product
CVEs closed
32
5 rated Critical
Exploited
2
CVE-2019-0808
Exploitation more likely
13
Vendor assessment
Highest EPSS
0.5302
98th percentile

Priority of the 32 CVEs

Patch now 2 Urgent 16 High 2 Routine 12

Applies to

Product
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2019-0808 Microsoft Graphics Component Elevation of Privilege 7.0 0.5302 KEVDisclosedExploited
Patch now CVE-2019-0703 Windows SMB Server Information Disclosure 6.5 0.0939 KEVExploited
Urgent CVE-2019-0603 Microsoft Windows Remote Code Execution 7.5 0.3421 Exploitation Less Likely
Urgent CVE-2019-0667 Microsoft Scripting Engine Remote Code Execution 7.5 0.3126 More likely
Urgent CVE-2019-0666 Microsoft Scripting Engine Remote Code Execution 7.5 0.1989 More likely
Urgent CVE-2019-0756 Microsoft XML Remote Code Execution 7.5 0.1250 Exploitation Less Likely
Urgent CVE-2019-0609 Microsoft Scripting Engine Remote Code Execution 4.2 0.0985 More likely
Urgent CVE-2019-0665 Microsoft Scripting Engine Remote Code Execution 7.5 0.0826 More likely
Urgent CVE-2019-0784 Microsoft Windows Remote Code Execution 4.2 0.0826 Exploitation Less Likely
Urgent CVE-2019-0680 Microsoft Scripting Engine Remote Code Execution 7.5 0.0810 More likely
Urgent CVE-2019-0763 Internet Explorer Remote Code Execution 6.4 0.0810 More likely
Urgent CVE-2019-0783 Microsoft Scripting Engine Remote Code Execution 6.4 0.0810 More likely
Urgent CVE-2019-0780 Microsoft Browsers Remote Code Execution 4.2 0.0799 More likely
Urgent CVE-2019-0821 Windows SMB Server Information Disclosure 6.5 0.0622 More likely
Urgent CVE-2019-0704 Windows SMB Server Information Disclosure 6.5 0.0558 More likely
Urgent CVE-2019-0755 Windows Kernel Information Disclosure 5.5 0.0235 More likely
Urgent CVE-2019-0767 Windows Kernel Information Disclosure 4.7 0.0179 More likely
Urgent CVE-2019-0775 Windows Kernel Information Disclosure 4.7 0.0124 More likely
High CVE-2019-0617 Microsoft JET Database Engine Remote Code Execution 7.8 0.1951 Exploitation Less Likely
High CVE-2019-0765 Microsoft Windows Remote Code Execution 7.5 0.1433 Exploitation Less Likely
Routine CVE-2019-0772 Microsoft Scripting Engine Remote Code Execution 6.4 0.1316 Exploitation Less Likely
Routine CVE-2019-0774 Microsoft Graphics Component Information Disclosure 4.7 0.0699 Exploitation Less Likely
Routine CVE-2019-0614 Microsoft Graphics Component Information Disclosure 4.7 0.0655 Exploitation Less Likely
Routine CVE-2019-0746 Microsoft Scripting Engine Information Disclosure 4.2 0.0655 Exploitation Less Likely
Routine CVE-2019-0762 Microsoft Browsers Security Feature Bypass 4.3 0.0450 Exploitation Less Likely
Showing 1 to 25 of 32 1Next