Microsoft · Security update · September 10, 2019

KB4515384: September 2019 cumulative update for Windows 10 1903

KB4515384, released September 10, 2019, fixes 55 CVEs across 10 products. 3 of them are being exploited (CVE-2019-1215); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now3 on CISA KEVKnown ransomware use3 publicly disclosedUnsupported product
CVEs closed
55
11 rated Critical
Exploited
3
CVE-2019-1215
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.6037
99th percentile

Priority of the 55 CVEs

Patch now 3 Urgent 13 High 21 Routine 18

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems18362.356
Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems18362.356
Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems18362.356
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems18362.356
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems18362.356
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems18362.356
Windows 10 Version 1903 for 32-bit Systems18362.356
Windows 10 Version 1903 for ARM64-based Systems18362.356
Windows 10 Version 1903 for x64-based Systems18362.356
Windows Server, version 1903 (Server Core installation)18362.356

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2019-1215 Microsoft Windows Elevation of Privilege 7.8 0.1925 KEVRansomwareExploited
Patch now CVE-2019-1253 Microsoft Windows Elevation of Privilege 7.8 0.1162 KEVRansomwareDisclosedExploited
Patch now CVE-2019-1214 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0142 KEVExploited
Urgent CVE-2019-1221 Microsoft Scripting Engine Remote Code Execution 7.5 0.1926 Exploitation Less Likely
Urgent CVE-2019-1280 Microsoft Windows Remote Code Execution 7.3 0.1898 Exploitation Less Likely
Urgent CVE-2019-0787 Windows RDP Remote Code Execution 7.5 0.1248 More likely
Urgent CVE-2019-0788 Windows RDP Remote Code Execution 7.5 0.1248 More likely
Urgent CVE-2019-1290 Windows RDP Remote Code Execution 7.5 0.1248 More likely
Urgent CVE-2019-1291 Windows RDP Remote Code Execution 7.5 0.1248 More likely
Urgent CVE-2019-1138 Microsoft Scripting Engine Remote Code Execution 4.2 0.0867 Exploitation Less Likely
Urgent CVE-2019-1217 Microsoft Scripting Engine Remote Code Execution 4.2 0.0867 Exploitation Less Likely
Urgent CVE-2019-1237 Microsoft Scripting Engine Remote Code Execution 4.2 0.0867 Exploitation Less Likely
Urgent CVE-2019-1298 Microsoft Scripting Engine Remote Code Execution 4.2 0.0867 Exploitation Less Likely
Urgent CVE-2019-1300 Microsoft Scripting Engine Remote Code Execution 4.2 0.0867 Exploitation Less Likely
Urgent CVE-2019-1219 Microsoft Windows Information Disclosure 5.5 0.0170 More likely
Urgent CVE-2019-1285 Windows Kernel Elevation of Privilege 7.8 0.0094 More likely
High CVE-2019-1243 Microsoft JET Database Engine Remote Code Execution 7.8 0.1845 Exploitation Less Likely
High CVE-2019-1250 Microsoft JET Database Engine Remote Code Execution 7.8 0.1845 Exploitation Less Likely
High CVE-2019-1241 Microsoft JET Database Engine Remote Code Execution 7.8 0.1724 Exploitation Less Likely
High CVE-2019-1246 Microsoft JET Database Engine Remote Code Execution 7.8 0.1264 Exploitation Less Likely
High CVE-2019-1240 Microsoft JET Database Engine Remote Code Execution 7.8 0.1192 Exploitation Less Likely
High CVE-2019-1242 Microsoft JET Database Engine Remote Code Execution 7.8 0.1192 Exploitation Less Likely
High CVE-2019-1247 Microsoft JET Database Engine Remote Code Execution 7.8 0.1192 Exploitation Less Likely
High CVE-2019-1248 Microsoft JET Database Engine Remote Code Execution 7.8 0.1192 Exploitation Less Likely
High CVE-2019-1249 Microsoft JET Database Engine Remote Code Execution 7.8 0.1192 Exploitation Less Likely
Showing 1 to 25 of 55 1Next