Microsoft · Security update · March 12, 2019

KB4489881: March 2019 security update

KB4489881, released March 12, 2019, fixes 32 CVEs across 9 products. 2 of them are being exploited (CVE-2019-0703); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEV1 publicly disclosed
CVEs closed
32
5 rated Critical
Exploited
2
CVE-2019-0703
Exploitation more likely
13
Vendor assessment
Highest EPSS
0.3421
98th percentile

Priority of the 32 CVEs

Patch now 2 Urgent 16 High 2 Routine 12

Applies to

Product
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows Server 2012 R2
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2019-0703 Windows SMB Server Information Disclosure 6.5 0.0939 KEVExploited
Patch now CVE-2019-0797 Microsoft Graphics Component Elevation of Privilege 7.0 0.0187 KEVExploited
Urgent CVE-2019-0603 Microsoft Windows Remote Code Execution 7.5 0.3421 Exploitation Less Likely
Urgent CVE-2019-0667 Microsoft Scripting Engine Remote Code Execution 7.5 0.3126 More likely
Urgent CVE-2019-0666 Microsoft Scripting Engine Remote Code Execution 7.5 0.1989 More likely
Urgent CVE-2019-0756 Microsoft XML Remote Code Execution 7.5 0.1250 Exploitation Less Likely
Urgent CVE-2019-0609 Microsoft Scripting Engine Remote Code Execution 4.2 0.0985 More likely
Urgent CVE-2019-0665 Microsoft Scripting Engine Remote Code Execution 7.5 0.0826 More likely
Urgent CVE-2019-0784 Microsoft Windows Remote Code Execution 4.2 0.0826 Exploitation Less Likely
Urgent CVE-2019-0680 Microsoft Scripting Engine Remote Code Execution 7.5 0.0810 More likely
Urgent CVE-2019-0763 Internet Explorer Remote Code Execution 6.4 0.0810 More likely
Urgent CVE-2019-0783 Microsoft Scripting Engine Remote Code Execution 6.4 0.0810 More likely
Urgent CVE-2019-0780 Microsoft Browsers Remote Code Execution 4.2 0.0799 More likely
Urgent CVE-2019-0821 Windows SMB Server Information Disclosure 6.5 0.0622 More likely
Urgent CVE-2019-0704 Windows SMB Server Information Disclosure 6.5 0.0558 More likely
Urgent CVE-2019-0755 Windows Kernel Information Disclosure 5.5 0.0235 More likely
Urgent CVE-2019-0767 Windows Kernel Information Disclosure 4.7 0.0179 More likely
Urgent CVE-2019-0775 Windows Kernel Information Disclosure 4.7 0.0124 More likely
High CVE-2019-0617 Microsoft JET Database Engine Remote Code Execution 7.8 0.1951 Exploitation Less Likely
High CVE-2019-0765 Microsoft Windows Remote Code Execution 7.5 0.1433 Exploitation Less Likely
Routine CVE-2019-0772 Microsoft Scripting Engine Remote Code Execution 6.4 0.1316 Exploitation Less Likely
Routine CVE-2019-0774 Microsoft Graphics Component Information Disclosure 4.7 0.0699 Exploitation Less Likely
Routine CVE-2019-0614 Microsoft Graphics Component Information Disclosure 4.7 0.0655 Exploitation Less Likely
Routine CVE-2019-0746 Microsoft Scripting Engine Information Disclosure 4.2 0.0655 Exploitation Less Likely
Routine CVE-2019-0762 Microsoft Browsers Security Feature Bypass 4.3 0.0450 Exploitation Less Likely
Showing 1 to 25 of 32 1Next