Microsoft · Security update · September 10, 2019

KB4516058: September 2019 cumulative update for Windows 10 1803

KB4516058, released September 10, 2019, fixes 56 CVEs across 14 products. 3 of them are being exploited (CVE-2019-1215); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now3 on CISA KEVKnown ransomware use3 publicly disclosedUnsupported product
CVEs closed
56
11 rated Critical
Exploited
3
CVE-2019-1215
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.6037
99th percentile

Priority of the 56 CVEs

Patch now 3 Urgent 13 High 22 Routine 18

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems17134.1006
Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems17134.1006
Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems17134.1006
Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for 32-bit Systems17134.1006
Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for x64-based Systems17134.1006
Microsoft .NET Framework 3.5 on Windows Server, version 1803 (Server Core Installation)17134.1006
Microsoft .NET Framework 4.8 on Windows Server, version 1803 (Server Core Installation)17134.1006
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems17134.1006
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems17134.1006
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems17134.1006
Windows 10 Version 1803 for 32-bit Systems17134.1006
Windows 10 Version 1803 for ARM64-based Systems17134.1006
Windows 10 Version 1803 for x64-based Systems17134.1006
Windows Server, version 1803 (Server Core Installation)17134.1006

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2019-1215 Microsoft Windows Elevation of Privilege 7.8 0.1925 KEVRansomwareExploited
Patch now CVE-2019-1253 Microsoft Windows Elevation of Privilege 7.8 0.1162 KEVRansomwareDisclosedExploited
Patch now CVE-2019-1214 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0142 KEVExploited
Urgent CVE-2019-1221 Microsoft Scripting Engine Remote Code Execution 7.5 0.1926 Exploitation Less Likely
Urgent CVE-2019-1280 Microsoft Windows Remote Code Execution 7.3 0.1898 Exploitation Less Likely
Urgent CVE-2019-0787 Windows RDP Remote Code Execution 7.5 0.1248 More likely
Urgent CVE-2019-0788 Windows RDP Remote Code Execution 7.5 0.1248 More likely
Urgent CVE-2019-1290 Windows RDP Remote Code Execution 7.5 0.1248 More likely
Urgent CVE-2019-1291 Windows RDP Remote Code Execution 7.5 0.1248 More likely
Urgent CVE-2019-1138 Microsoft Scripting Engine Remote Code Execution 4.2 0.0867 Exploitation Less Likely
Urgent CVE-2019-1217 Microsoft Scripting Engine Remote Code Execution 4.2 0.0867 Exploitation Less Likely
Urgent CVE-2019-1237 Microsoft Scripting Engine Remote Code Execution 4.2 0.0867 Exploitation Less Likely
Urgent CVE-2019-1298 Microsoft Scripting Engine Remote Code Execution 4.2 0.0867 Exploitation Less Likely
Urgent CVE-2019-1300 Microsoft Scripting Engine Remote Code Execution 4.2 0.0867 Exploitation Less Likely
Urgent CVE-2019-1219 Microsoft Windows Information Disclosure 5.5 0.0170 More likely
Urgent CVE-2019-1285 Windows Kernel Elevation of Privilege 7.8 0.0094 More likely
High CVE-2019-1243 Microsoft JET Database Engine Remote Code Execution 7.8 0.1845 Exploitation Less Likely
High CVE-2019-1250 Microsoft JET Database Engine Remote Code Execution 7.8 0.1845 Exploitation Less Likely
High CVE-2019-1241 Microsoft JET Database Engine Remote Code Execution 7.8 0.1724 Exploitation Less Likely
High CVE-2019-1246 Microsoft JET Database Engine Remote Code Execution 7.8 0.1264 Exploitation Less Likely
High CVE-2019-1240 Microsoft JET Database Engine Remote Code Execution 7.8 0.1192 Exploitation Less Likely
High CVE-2019-1242 Microsoft JET Database Engine Remote Code Execution 7.8 0.1192 Exploitation Less Likely
High CVE-2019-1247 Microsoft JET Database Engine Remote Code Execution 7.8 0.1192 Exploitation Less Likely
High CVE-2019-1248 Microsoft JET Database Engine Remote Code Execution 7.8 0.1192 Exploitation Less Likely
High CVE-2019-1249 Microsoft JET Database Engine Remote Code Execution 7.8 0.1192 Exploitation Less Likely
Showing 1 to 25 of 56 1Next