Microsoft · Security update · November 12, 2019

KB4525246: November 2019 security update

KB4525246, released November 12, 2019, fixes 39 CVEs across 3 products. 3 of them are being exploited (CVE-2019-1429); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEVKnown ransomware use
CVEs closed
39
4 rated Critical
Exploited
3
CVE-2019-1429
Exploitation more likely
8
Vendor assessment
Highest EPSS
0.7729
99th percentile

Priority of the 39 CVEs

Patch now 3 Urgent 12 High 11 Routine 13

Applies to

Product
Internet Explorer 10 on Windows Server 2012
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2019-1429 Microsoft Scripting Engine Remote Code Execution 6.4 0.7729 KEVExploited
Patch now CVE-2019-1405 Microsoft Windows Elevation of Privilege 7.8 0.3017 KEVRansomwareExploited
Patch now CVE-2019-1388 Microsoft Windows Elevation of Privilege 7.8 0.0859 KEVRansomwareExploited
Urgent CVE-2019-1419 Microsoft Graphics Component Remote Code Execution 7.8 0.1161 Exploitation Less Likely
Urgent CVE-2019-0719 Windows Hyper-V Remote Code Execution 8.0 0.1142 Exploitation Less Likely
Urgent CVE-2019-1390 Microsoft Scripting Engine Remote Code Execution 6.4 0.0777 More likely
Urgent CVE-2019-1389 Windows Hyper-V Remote Code Execution 7.6 0.0489 N/A
Urgent CVE-2019-1397 Windows Hyper-V Remote Code Execution 7.6 0.0489 Exploitation Less Likely
Urgent CVE-2019-1393 Microsoft Graphics Component Elevation of Privilege 7.8 0.0142 More likely
Urgent CVE-2019-1408 Microsoft Graphics Component Elevation of Privilege 7.8 0.0142 More likely
Urgent CVE-2019-1394 Microsoft Graphics Component Elevation of Privilege 7.8 0.0121 More likely
Urgent CVE-2019-1395 Microsoft Graphics Component Elevation of Privilege 7.8 0.0121 More likely
Urgent CVE-2019-1396 Microsoft Graphics Component Elevation of Privilege 7.8 0.0121 More likely
Urgent CVE-2019-1435 Microsoft Graphics Component Elevation of Privilege 7.0 0.0093 More likely
Urgent CVE-2019-1438 Microsoft Graphics Component Elevation of Privilege 7.0 0.0089 More likely
High CVE-2019-1456 Graphic Fonts Remote Code Execution 7.8 0.0970 None reported
High CVE-2019-1384 Microsoft Windows Security Feature Bypass 8.5 0.0699 Exploitation Less Likely
High CVE-2019-1424 Microsoft Windows Security Feature Bypass 8.1 0.0307 Exploitation Less Likely
High CVE-2019-1422 Microsoft Windows Elevation of Privilege 7.8 0.0207 Exploitation Less Likely
High CVE-2019-1382 Microsoft Windows Elevation of Privilege 7.8 0.0123 Exploitation Less Likely
High CVE-2019-1433 Microsoft Graphics Component Elevation of Privilege 7.0 0.0094 Exploitation Less Likely
High CVE-2019-1407 Microsoft Graphics Component Elevation of Privilege 7.8 0.0093 N/A
High CVE-2019-1392 Windows Kernel Elevation of Privilege 7.0 0.0089 N/A
High CVE-2019-1434 Microsoft Graphics Component Elevation of Privilege 7.0 0.0089 N/A
High CVE-2019-1415 Microsoft Windows Elevation of Privilege 7.8 0.0084 Exploitation Less Likely
Showing 1 to 25 of 39 1Next