Microsoft · Security update · June 11, 2019

KB4503267: June 2019 cumulative update for Windows 10 1607

KB4503267, released June 11, 2019, fixes 57 CVEs across 10 products. 2 of them are being exploited (CVE-2019-1064); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEVKnown ransomware use4 publicly disclosed
CVEs closed
57
14 rated Critical
Exploited
2
CVE-2019-1064
Exploitation more likely
25
Vendor assessment
Highest EPSS
0.4804
98th percentile

Priority of the 57 CVEs

Patch now 2 Urgent 29 High 14 Routine 12

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems14393.3025
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems14393.3025
Internet Explorer 11 on Windows Server 201614393.3025
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems14393.3025
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems14393.3025
Microsoft Edge (EdgeHTML-based) on Windows Server 201614393.3025
Windows 10 Version 1607 for 32-bit Systems14393.3025
Windows 10 Version 1607 for x64-based Systems14393.3025
Windows Server 201614393.3025
Windows Server 2016 (Server Core installation)14393.3025

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2019-1064 Microsoft Windows Elevation of Privilege 7.8 0.0689 KEVRansomwareDisclosedExploited
Patch now CVE-2019-1069 Microsoft Windows Elevation of Privilege 7.8 0.0617 KEVRansomwareDisclosedExploited
Urgent CVE-2019-0888 Microsoft Windows Remote Code Execution 8.8 0.1113 Exploitation Less Likely
Urgent CVE-2019-0988 Microsoft Scripting Engine Remote Code Execution 7.5 0.0574 More likely
Urgent CVE-2019-0920 Microsoft Scripting Engine Remote Code Execution 7.5 0.0552 More likely
Urgent CVE-2019-0990 Microsoft Scripting Engine Remote Code Execution 6.5 0.0541 More likely
Urgent CVE-2019-1023 Microsoft Scripting Engine Information Disclosure 6.5 0.0541 More likely
Urgent CVE-2019-1025 Microsoft Windows Denial of Service 6.5 0.0539 More likely
Urgent CVE-2019-0722 Microsoft Windows Remote Code Execution 8.8 0.0472 Exploitation Less Likely
Urgent CVE-2019-1051 Microsoft Scripting Engine Remote Code Execution 4.2 0.0412 More likely
Urgent CVE-2019-0709 Microsoft Windows Remote Code Execution 7.6 0.0404 Exploitation Less Likely
Urgent CVE-2019-1005 VBScript Remote Code Execution 6.4 0.0335 More likely
Urgent CVE-2019-1055 Microsoft Scripting Engine Remote Code Execution 6.4 0.0335 More likely
Urgent CVE-2019-1038 Microsoft Browsers Remote Code Execution 6.4 0.0332 More likely
Urgent CVE-2019-1080 Microsoft Scripting Engine Remote Code Execution 6.4 0.0332 More likely
Urgent CVE-2019-0992 Microsoft Scripting Engine Remote Code Execution 4.2 0.0256 More likely
Urgent CVE-2019-0991 Microsoft Scripting Engine Remote Code Execution 4.2 0.0247 More likely
Urgent CVE-2019-0993 Microsoft Scripting Engine Remote Code Execution 4.2 0.0247 More likely
Urgent CVE-2019-0989 Microsoft Scripting Engine Remote Code Execution 4.2 0.0240 More likely
Urgent CVE-2019-1003 Microsoft Scripting Engine Remote Code Execution 4.2 0.0240 More likely
Urgent CVE-2019-1052 Microsoft Scripting Engine Remote Code Execution 4.2 0.0240 More likely
Urgent CVE-2019-0943 Microsoft Windows Elevation of Privilege 7.8 0.0237 More likely
Urgent CVE-2019-1002 Microsoft Scripting Engine Remote Code Execution 4.2 0.0235 More likely
Urgent CVE-2019-1081 Microsoft Browsers Information Disclosure 4.2 0.0234 More likely
Urgent CVE-2019-0986 Windows Shell Elevation of Privilege 6.3 0.0207 More likely
Showing 1 to 25 of 57 1Next