Microsoft · Security update · October 8, 2019
KB4519974: October 2019 security update
KB4519974, released October 8, 2019, fixes 6 CVEs across 10 products. One of them is being exploited (CVE-2019-1367); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
6
None rated Critical
Exploited
1
CVE-2019-1367
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.5245
98th percentile
Priority of the 6 CVEs
Patch now 1
Urgent 1
High 0
Routine 4
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2019-1367 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.5245 | KEVRansomwareExploited |
| Urgent | CVE-2019-1192 | Microsoft Browsers | Security Feature Bypass | 2.4 | 0.0371 | More likely |
| Routine | CVE-2019-1371 | Internet Explorer | Remote Code Execution | 6.4 | 0.0740 | Exploitation Less Likely |
| Routine | CVE-2019-1238 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.0586 | Exploitation Less Likely |
| Routine | CVE-2019-0608 | Microsoft Browsers | Spoofing | 2.4 | 0.0235 | Exploitation Less Likely |
| Routine | CVE-2019-1357 | Microsoft Browsers | Spoofing | 3.5 | 0.0229 | Exploitation Less Likely |
Showing 1 to 6 of 6
1