Microsoft · Security update · March 12, 2019

KB4489883: March 2019 security update

KB4489883, released March 12, 2019, fixes 21 CVEs across 4 products. 2 of them are being exploited (CVE-2019-0703); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEV1 publicly disclosed
CVEs closed
21
3 rated Critical
Exploited
2
CVE-2019-0703
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.3421
98th percentile

Priority of the 21 CVEs

Patch now 2 Urgent 8 High 2 Routine 9

Applies to

Product
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2019-0703 Windows SMB Server Information Disclosure 6.5 0.0939 KEVExploited
Patch now CVE-2019-0797 Microsoft Graphics Component Elevation of Privilege 7.0 0.0187 KEVExploited
Urgent CVE-2019-0603 Microsoft Windows Remote Code Execution 7.5 0.3421 Exploitation Less Likely
Urgent CVE-2019-0756 Microsoft XML Remote Code Execution 7.5 0.1250 Exploitation Less Likely
Urgent CVE-2019-0784 Microsoft Windows Remote Code Execution 4.2 0.0826 Exploitation Less Likely
Urgent CVE-2019-0821 Windows SMB Server Information Disclosure 6.5 0.0622 More likely
Urgent CVE-2019-0704 Windows SMB Server Information Disclosure 6.5 0.0558 More likely
Urgent CVE-2019-0755 Windows Kernel Information Disclosure 5.5 0.0235 More likely
Urgent CVE-2019-0767 Windows Kernel Information Disclosure 4.7 0.0179 More likely
Urgent CVE-2019-0775 Windows Kernel Information Disclosure 4.7 0.0124 More likely
High CVE-2019-0617 Microsoft JET Database Engine Remote Code Execution 7.8 0.1951 Exploitation Less Likely
High CVE-2019-0765 Microsoft Windows Remote Code Execution 7.5 0.1433 Exploitation Less Likely
Routine CVE-2019-0772 Microsoft Scripting Engine Remote Code Execution 6.4 0.1316 Exploitation Less Likely
Routine CVE-2019-0774 Microsoft Graphics Component Information Disclosure 4.7 0.0699 Exploitation Less Likely
Routine CVE-2019-0614 Microsoft Graphics Component Information Disclosure 4.7 0.0655 Exploitation Less Likely
Routine CVE-2019-0690 Windows Hyper-V Denial of Service 6.8 0.0190 Exploitation Less Likely
Routine CVE-2019-0601 Microsoft Windows Information Disclosure 4.7 0.0185 Exploitation Less Likely
Routine CVE-2019-0759 Windows Print Spooler Components Information Disclosure 4.7 0.0173 Exploitation Less Likely
Routine CVE-2019-0702 Windows Kernel Information Disclosure 5.5 0.0162 Exploitation Less Likely
Routine CVE-2019-0754 Microsoft Windows Denial of Service 5.5 0.0162 DisclosedExploitation Less Likely
Routine CVE-2019-0782 Windows Kernel Information Disclosure 4.7 0.0162 Exploitation Less Likely
Showing 1 to 21 of 21 1