Microsoft · Security update · October 8, 2019

KB4519976: October 2019 security update

KB4519976, released October 8, 2019, fixes 27 CVEs across 8 products. 2 of them are being exploited (CVE-2019-1367); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
27
1 rated Critical
Exploited
2
CVE-2019-1367
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.7593
99th percentile

Priority of the 27 CVEs

Patch now 2 Urgent 3 High 11 Routine 11

Applies to

Product
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2019-1367 Microsoft Scripting Engine Remote Code Execution 6.4 0.5245 KEVRansomwareExploited
Patch now CVE-2019-1315 Microsoft Windows Elevation of Privilege 7.8 0.0348 KEVRansomwareExploited
Urgent CVE-2019-1333 Windows RDP Remote Code Execution 7.5 0.1598 More likely
Urgent CVE-2019-1192 Microsoft Browsers Security Feature Bypass 2.4 0.0371 More likely
Urgent CVE-2019-1341 Microsoft Windows Elevation of Privilege 7.8 0.0109 More likely
High CVE-2019-1358 Microsoft JET Database Engine Remote Code Execution 7.8 0.7593 Exploitation Less Likely
High CVE-2019-1359 Microsoft JET Database Engine Remote Code Execution 7.8 0.1927 Exploitation Less Likely
High CVE-2019-1326 Windows RDP Denial of Service 7.5 0.0646 Exploitation Less Likely
High CVE-2019-1365 Windows IIS Elevation of Privilege 7.5 0.0435 Exploitation Less Likely
High CVE-2019-1318 Microsoft Windows Spoofing 7.7 0.0352 Exploitation Less Likely
High CVE-2019-1364 Microsoft Graphics Component Elevation of Privilege 7.0 0.0288 N/A
High CVE-2019-1362 Microsoft Graphics Component Elevation of Privilege 7.0 0.0155 N/A
High CVE-2019-1339 Microsoft Windows Elevation of Privilege 7.8 0.0132 None reported
High CVE-2019-1342 Microsoft Windows Elevation of Privilege 7.0 0.0118 Exploitation Less Likely
High CVE-2019-1319 Microsoft Windows Elevation of Privilege 7.0 0.0097 Exploitation Less Likely
High CVE-2019-1454 Microsoft Windows Elevation of Privilege n/a 0.0064 Exploitation Less Likely
Routine CVE-2019-1166 Windows NTLM Tampering 5.9 0.6811 Exploitation Less Likely
Routine CVE-2019-1346 Microsoft Windows Denial of Service 5.7 0.1093 Exploitation Less Likely
Routine CVE-2019-1371 Internet Explorer Remote Code Execution 6.4 0.0740 Exploitation Less Likely
Routine CVE-2019-1361 Microsoft Graphics Component Information Disclosure 5.5 0.0690 N/A
Routine CVE-2019-1238 Microsoft Scripting Engine Remote Code Execution 6.4 0.0586 Exploitation Less Likely
Routine CVE-2019-1338 Microsoft Windows Security Feature Bypass 5.3 0.0356 N/A
Routine CVE-2019-1344 Microsoft Windows Information Disclosure 5.5 0.0307 Exploitation Less Likely
Routine CVE-2019-0608 Microsoft Browsers Spoofing 2.4 0.0235 Exploitation Less Likely
Routine CVE-2019-1357 Microsoft Browsers Spoofing 3.5 0.0229 Exploitation Less Likely
Showing 1 to 25 of 27 1Next