Microsoft · Security update · April 9, 2019

KB4493448: April 2019 security update

KB4493448, released April 9, 2019, fixes 32 CVEs across 5 products. 2 of them are being exploited (CVE-2019-0803); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
32
6 rated Critical
Exploited
2
CVE-2019-0803
Exploitation more likely
10
Vendor assessment
Highest EPSS
0.4523
98th percentile

Priority of the 32 CVEs

Patch now 2 Urgent 15 High 8 Routine 7

Applies to

Product
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2019-0803 Microsoft Graphics Component Elevation of Privilege 7.0 0.4523 KEVRansomwareExploited
Patch now CVE-2019-0859 Windows Kernel Elevation of Privilege 7.8 0.0419 KEVRansomwareExploited
Urgent CVE-2019-0853 Microsoft Graphics Component Remote Code Execution 7.8 0.3005 Exploitation Less Likely
Urgent CVE-2019-0795 Microsoft XML Remote Code Execution 7.8 0.2132 Exploitation Less Likely
Urgent CVE-2019-0791 Microsoft XML Remote Code Execution 7.8 0.1818 Exploitation Less Likely
Urgent CVE-2019-0792 Microsoft XML Remote Code Execution 7.8 0.1818 Exploitation Less Likely
Urgent CVE-2019-0793 Microsoft XML Remote Code Execution 7.8 0.1818 More likely
Urgent CVE-2019-0794 Microsoft Windows Remote Code Execution 7.8 0.1548 More likely
Urgent CVE-2019-0845 Microsoft Windows Remote Code Execution 7.5 0.1481 Exploitation Less Likely
Urgent CVE-2019-0731 Microsoft Windows Elevation of Privilege 6.8 0.0435 More likely
Urgent CVE-2019-0730 Microsoft Windows Elevation of Privilege 6.7 0.0435 More likely
Urgent CVE-2019-0836 Microsoft Windows Elevation of Privilege 7.0 0.0430 More likely
Urgent CVE-2019-0796 Microsoft Windows Elevation of Privilege 6.3 0.0424 More likely
Urgent CVE-2019-0732 Microsoft Windows Security Feature Bypass 5.3 0.0378 More likely
Urgent CVE-2019-0735 CSRSS Elevation of Privilege 7.0 0.0366 More likely
Urgent CVE-2019-0805 Microsoft Windows Elevation of Privilege 6.7 0.0279 More likely
Urgent CVE-2019-0844 Windows Kernel Information Disclosure 5.5 0.0213 More likely
High CVE-2019-0674 Microsoft Office Remote Code Execution 7.8 0.1841 Exploitation Less Likely
High CVE-2019-0846 Microsoft JET Database Engine Remote Code Execution 7.8 0.1612 Exploitation Less Likely
High CVE-2019-0847 Microsoft JET Database Engine Remote Code Execution 7.8 0.1612 Exploitation Less Likely
High CVE-2019-0851 Microsoft JET Database Engine Remote Code Execution 7.8 0.1612 Exploitation Less Likely
High CVE-2019-0671 Microsoft Office Remote Code Execution 7.8 0.1482 Exploitation Less Likely
High CVE-2019-0673 Microsoft Office Remote Code Execution 7.8 0.1482 Exploitation Less Likely
High CVE-2019-0879 Microsoft JET Database Engine Remote Code Execution 7.8 0.0979 Exploitation Less Likely
High CVE-2019-0877 Microsoft JET Database Engine Remote Code Execution 7.8 0.0495 Exploitation Less Likely
Showing 1 to 25 of 32 1Next