Microsoft · Security update · December 10, 2019

KB4530691: December 2019 security update

KB4530691, released December 10, 2019, fixes 11 CVEs across 3 products. One of them is being exploited (CVE-2019-1458); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use
CVEs closed
11
1 rated Critical
Exploited
1
CVE-2019-1458
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.7444
99th percentile

Priority of the 11 CVEs

Patch now 1 Urgent 2 High 2 Routine 6

Applies to

Product
Internet Explorer 10 on Windows Server 2012
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2019-1458 Windows Kernel Elevation of Privilege 7.8 0.7444 KEVRansomwareExploited
Urgent CVE-2019-1468 Microsoft Graphics Component Remote Code Execution 8.4 0.1768 Exploitation Less Likely
Urgent CVE-2019-1485 Microsoft Scripting Engine Remote Code Execution 6.4 0.0821 More likely
High CVE-2019-1453 Microsoft Windows Denial of Service 7.5 0.0975 Exploitation Less Likely
High CVE-2019-1484 Windows OLE Remote Code Execution 7.8 0.0948 Exploitation Less Likely
Routine CVE-2019-1470 Windows Hyper-V Information Disclosure 6.0 0.0667 Exploitation Less Likely
Routine CVE-2019-1465 Microsoft Graphics Component Information Disclosure 5.5 0.0602 Exploitation Less Likely
Routine CVE-2019-1466 Microsoft Graphics Component Information Disclosure 5.5 0.0602 Exploitation Less Likely
Routine CVE-2019-1467 Microsoft Graphics Component Information Disclosure 5.5 0.0601 Exploitation Less Likely
Routine CVE-2019-1474 Microsoft Windows Information Disclosure 5.5 0.0156 Exploitation Less Likely
Routine CVE-2019-1488 Microsoft Windows Security Feature Bypass 3.3 0.0086 Exploitation Less Likely
Showing 1 to 11 of 11 1