Microsoft · Security update · April 9, 2019
KB4493435: April 2019 security update
KB4493435, released April 9, 2019, fixes 5 CVEs across 9 products. One of them is being exploited (CVE-2019-0752); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
5
None rated Critical
Exploited
1
CVE-2019-0752
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.8168
99th percentile
Priority of the 5 CVEs
Patch now 1
Urgent 2
High 0
Routine 2
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2019-0752 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.8168 | KEVRansomwareExploited |
| Urgent | CVE-2019-0862 | Microsoft Scripting Engine | Remote Code Execution | n/a | 0.1111 | More likely |
| Urgent | CVE-2019-0753 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.0922 | More likely |
| Routine | CVE-2019-0835 | Microsoft Scripting Engine | Information Disclosure | 4.3 | 0.0674 | Exploitation Less Likely |
| Routine | CVE-2019-0764 | Microsoft Browsers | Tampering | 6.3 | 0.0364 | Exploitation Less Likely |
Showing 1 to 5 of 5
1