Microsoft · Security update · October 8, 2019

KB4519338: October 2019 cumulative update for Windows 10 1809

KB4519338, released October 8, 2019, fixes 44 CVEs across 13 products. 3 of them are being exploited (CVE-2019-1367); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEVKnown ransomware use
CVEs closed
44
7 rated Critical
Exploited
3
CVE-2019-1367
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.7593
99th percentile

Priority of the 44 CVEs

Patch now 3 Urgent 9 High 14 Routine 18

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems17763.805
Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems17763.805
Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems17763.805
Internet Explorer 11 on Windows Server 201917763.805
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems17763.805
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems17763.805
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems17763.805
Microsoft Edge (EdgeHTML-based) on Windows Server 201917763.805
Windows 10 Version 1809 for 32-bit Systems17763.805
Windows 10 Version 1809 for ARM64-based Systems17763.805
Windows 10 Version 1809 for x64-based Systems17763.805
Windows Server 201917763.805
Windows Server 2019 (Server Core installation)17763.805

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2019-1367 Microsoft Scripting Engine Remote Code Execution 6.4 0.5245 KEVRansomwareExploited
Patch now CVE-2019-1322 Microsoft Windows Elevation of Privilege 7.0 0.1884 KEVRansomwareExploited
Patch now CVE-2019-1315 Microsoft Windows Elevation of Privilege 7.8 0.0348 KEVRansomwareExploited
Urgent CVE-2019-1333 Windows RDP Remote Code Execution 7.5 0.1598 More likely
Urgent CVE-2019-1060 Microsoft Scripting Engine Remote Code Execution 6.4 0.1379 Exploitation Less Likely
Urgent CVE-2019-1307 Microsoft Scripting Engine Remote Code Execution 4.2 0.1010 Exploitation Less Likely
Urgent CVE-2019-1308 Microsoft Scripting Engine Remote Code Execution 4.2 0.1010 Exploitation Less Likely
Urgent CVE-2019-1335 Microsoft Scripting Engine Remote Code Execution 4.2 0.0990 Exploitation Less Likely
Urgent CVE-2019-1366 Microsoft Scripting Engine Remote Code Execution 4.2 0.0990 N/A
Urgent CVE-2019-1239 Microsoft Scripting Engine Remote Code Execution 7.5 0.0755 Exploitation Less Likely
Urgent CVE-2019-1192 Microsoft Browsers Security Feature Bypass 2.4 0.0371 More likely
Urgent CVE-2019-1341 Microsoft Windows Elevation of Privilege 7.8 0.0109 More likely
High CVE-2019-1358 Microsoft JET Database Engine Remote Code Execution 7.8 0.7593 Exploitation Less Likely
High CVE-2019-1311 Microsoft Windows Remote Code Execution 7.8 0.3623 Exploitation Less Likely
High CVE-2019-1359 Microsoft JET Database Engine Remote Code Execution 7.8 0.1927 Exploitation Less Likely
High CVE-2019-1326 Windows RDP Denial of Service 7.5 0.0646 Exploitation Less Likely
High CVE-2019-1365 Windows IIS Elevation of Privilege 7.5 0.0435 Exploitation Less Likely
High CVE-2019-1318 Microsoft Windows Spoofing 7.7 0.0352 Exploitation Less Likely
High CVE-2019-1339 Microsoft Windows Elevation of Privilege 7.8 0.0132 None reported
High CVE-2019-1342 Microsoft Windows Elevation of Privilege 7.0 0.0118 Exploitation Less Likely
High CVE-2019-1340 Microsoft Windows Elevation of Privilege 7.8 0.0113 Exploitation Less Likely
High CVE-2019-1320 Microsoft Windows Elevation of Privilege 7.0 0.0109 Exploitation Less Likely
High CVE-2019-1323 Windows Update Stack Elevation of Privilege 7.0 0.0098 Exploitation Less Likely
High CVE-2019-1319 Microsoft Windows Elevation of Privilege 7.0 0.0097 Exploitation Less Likely
High CVE-2019-1336 Windows Update Stack Elevation of Privilege 7.0 0.0097 Exploitation Less Likely
Showing 1 to 25 of 44 1Next