Microsoft · Security update · March 12, 2019

KB4489882: March 2019 cumulative update for Windows 10 1607

KB4489882, released March 12, 2019, fixes 41 CVEs across 10 products. 2 of them are being exploited (CVE-2019-0703); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEV1 publicly disclosed
CVEs closed
41
9 rated Critical
Exploited
2
CVE-2019-0703
Exploitation more likely
19
Vendor assessment
Highest EPSS
0.3421
98th percentile

Priority of the 41 CVEs

Patch now 2 Urgent 22 High 2 Routine 15

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems14393.2848
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems14393.2848
Internet Explorer 11 on Windows Server 201614393.2848
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems14393.2848
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems14393.2848
Microsoft Edge (EdgeHTML-based) on Windows Server 201614393.2848
Windows 10 Version 1607 for 32-bit Systems14393.2848
Windows 10 Version 1607 for x64-based Systems14393.2848
Windows Server 201614393.2848
Windows Server 2016 (Server Core installation)14393.2848

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2019-0703 Windows SMB Server Information Disclosure 6.5 0.0939 KEVExploited
Patch now CVE-2019-0797 Microsoft Graphics Component Elevation of Privilege 7.0 0.0187 KEVExploited
Urgent CVE-2019-0603 Microsoft Windows Remote Code Execution 7.5 0.3421 Exploitation Less Likely
Urgent CVE-2019-0667 Microsoft Scripting Engine Remote Code Execution 7.5 0.3126 More likely
Urgent CVE-2019-0666 Microsoft Scripting Engine Remote Code Execution 7.5 0.1989 More likely
Urgent CVE-2019-0756 Microsoft XML Remote Code Execution 7.5 0.1250 Exploitation Less Likely
Urgent CVE-2019-0769 Microsoft Scripting Engine Remote Code Execution 4.2 0.1034 More likely
Urgent CVE-2019-0771 Microsoft Scripting Engine Remote Code Execution 4.2 0.1034 More likely
Urgent CVE-2019-0773 Microsoft Scripting Engine Remote Code Execution 4.2 0.1034 More likely
Urgent CVE-2019-0609 Microsoft Scripting Engine Remote Code Execution 4.2 0.0985 More likely
Urgent CVE-2019-0665 Microsoft Scripting Engine Remote Code Execution 7.5 0.0826 More likely
Urgent CVE-2019-0784 Microsoft Windows Remote Code Execution 4.2 0.0826 Exploitation Less Likely
Urgent CVE-2019-0680 Microsoft Scripting Engine Remote Code Execution 7.5 0.0810 More likely
Urgent CVE-2019-0763 Internet Explorer Remote Code Execution 6.4 0.0810 More likely
Urgent CVE-2019-0783 Microsoft Scripting Engine Remote Code Execution 6.4 0.0810 More likely
Urgent CVE-2019-0770 Microsoft Scripting Engine Remote Code Execution 4.2 0.0810 More likely
Urgent CVE-2019-0780 Microsoft Browsers Remote Code Execution 4.2 0.0799 More likely
Urgent CVE-2019-0779 Microsoft Edge Information Disclosure 4.2 0.0787 More likely
Urgent CVE-2019-0821 Windows SMB Server Information Disclosure 6.5 0.0622 More likely
Urgent CVE-2019-0704 Windows SMB Server Information Disclosure 6.5 0.0558 More likely
Urgent CVE-2019-0755 Windows Kernel Information Disclosure 5.5 0.0235 More likely
Urgent CVE-2019-0767 Windows Kernel Information Disclosure 4.7 0.0179 More likely
Urgent CVE-2019-0775 Windows Kernel Information Disclosure 4.7 0.0124 More likely
Urgent CVE-2019-0696 Windows Kernel Elevation of Privilege 7.0 0.0108 More likely
High CVE-2019-0617 Microsoft JET Database Engine Remote Code Execution 7.8 0.1951 Exploitation Less Likely
Showing 1 to 25 of 41 1Next