Microsoft · Security update · March 12, 2019

KB4489899: March 2019 cumulative update for Windows 10 1809

KB4489899, released March 12, 2019, fixes 54 CVEs across 13 products. 2 of them are being exploited (CVE-2019-0703); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEV1 publicly disclosed
CVEs closed
54
13 rated Critical
Exploited
2
CVE-2019-0703
Exploitation more likely
21
Vendor assessment
Highest EPSS
0.6285
99th percentile

Priority of the 54 CVEs

Patch now 2 Urgent 27 High 7 Routine 18

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems17763.379
Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems17763.379
Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems17763.379
Internet Explorer 11 on Windows Server 201917763.379
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems17763.379
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems17763.379
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems17763.379
Microsoft Edge (EdgeHTML-based) on Windows Server 201917763.379
Windows 10 Version 1809 for 32-bit Systems17763.379
Windows 10 Version 1809 for ARM64-based Systems17763.379
Windows 10 Version 1809 for x64-based Systems17763.379
Windows Server 201917763.379
Windows Server 2019 (Server Core installation)17763.379

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2019-0703 Windows SMB Server Information Disclosure 6.5 0.0939 KEVExploited
Patch now CVE-2019-0797 Microsoft Graphics Component Elevation of Privilege 7.0 0.0187 KEVExploited
Urgent CVE-2019-0698 Windows DHCP Client Remote Code Execution 9.8 0.6285 Exploitation Less Likely
Urgent CVE-2019-0726 Windows DHCP Client Remote Code Execution 9.8 0.5446 Exploitation Less Likely
Urgent CVE-2019-0768 Internet Explorer Security Feature Bypass 4.3 0.4850 More likely
Urgent CVE-2019-0603 Microsoft Windows Remote Code Execution 7.5 0.3421 Exploitation Less Likely
Urgent CVE-2019-0697 Windows DHCP Client Remote Code Execution 9.8 0.3292 Exploitation Less Likely
Urgent CVE-2019-0667 Microsoft Scripting Engine Remote Code Execution 7.5 0.3126 More likely
Urgent CVE-2019-0592 Microsoft Scripting Engine Elevation of Privilege 4.2 0.2287 More likely
Urgent CVE-2019-0666 Microsoft Scripting Engine Remote Code Execution 7.5 0.1989 More likely
Urgent CVE-2019-0756 Microsoft XML Remote Code Execution 7.5 0.1250 Exploitation Less Likely
Urgent CVE-2019-0639 Microsoft Scripting Engine Remote Code Execution 4.2 0.1205 More likely
Urgent CVE-2019-0612 Microsoft Edge Security Feature Bypass 4.3 0.1051 More likely
Urgent CVE-2019-0769 Microsoft Scripting Engine Remote Code Execution 4.2 0.1034 More likely
Urgent CVE-2019-0771 Microsoft Scripting Engine Remote Code Execution 4.2 0.1034 More likely
Urgent CVE-2019-0773 Microsoft Scripting Engine Remote Code Execution 4.2 0.1034 More likely
Urgent CVE-2019-0609 Microsoft Scripting Engine Remote Code Execution 4.2 0.0985 More likely
Urgent CVE-2019-0665 Microsoft Scripting Engine Remote Code Execution 7.5 0.0826 More likely
Urgent CVE-2019-0784 Microsoft Windows Remote Code Execution 4.2 0.0826 Exploitation Less Likely
Urgent CVE-2019-0680 Microsoft Scripting Engine Remote Code Execution 7.5 0.0810 More likely
Urgent CVE-2019-0763 Internet Explorer Remote Code Execution 6.4 0.0810 More likely
Urgent CVE-2019-0783 Microsoft Scripting Engine Remote Code Execution 6.4 0.0810 More likely
Urgent CVE-2019-0780 Microsoft Browsers Remote Code Execution 4.2 0.0799 More likely
Urgent CVE-2019-0821 Windows SMB Server Information Disclosure 6.5 0.0622 More likely
Urgent CVE-2019-0704 Windows SMB Server Information Disclosure 6.5 0.0558 More likely
Showing 1 to 25 of 54 1Next