Microsoft · Security update · December 10, 2019

KB4530714: December 2019 cumulative update for Windows 10 1709

KB4530714, released December 10, 2019, fixes 13 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
13
1 rated Critical
Exploited
0
None reported
Exploitation more likely
1
Microsoft's assessment
Highest EPSS
0.1768
97th percentile

Priority of the 13 CVEs

Patch now 0 Urgent 2 High 4 Routine 7

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2019-1468 Microsoft Graphics ComponentRemote Code Execution8.4 0.1768 Exploitation Less Likely
Urgent CVE-2019-1485 Microsoft Scripting EngineRemote Code Execution6.4 0.0821 More likely
High CVE-2019-1453 Microsoft WindowsDenial of Service7.5 0.0975 Exploitation Less Likely
High CVE-2019-1484 Windows OLERemote Code Execution7.8 0.0948 Exploitation Less Likely
High CVE-2019-1476 Microsoft WindowsElevation of Privilege7.8 0.0509 Exploitation Less Likely
High CVE-2019-1483 Microsoft WindowsElevation of Privilege7.8 0.0188 Exploitation Less Likely
Routine CVE-2019-1470 Windows Hyper-VInformation Disclosure6.0 0.0667 Exploitation Less Likely
Routine CVE-2019-1465 Microsoft Graphics ComponentInformation Disclosure5.5 0.0602 Exploitation Less Likely
Routine CVE-2019-1466 Microsoft Graphics ComponentInformation Disclosure5.5 0.0602 Exploitation Less Likely
Routine CVE-2019-1467 Microsoft Graphics ComponentInformation Disclosure5.5 0.0601 Exploitation Less Likely
Routine CVE-2019-1472 Windows KernelInformation Disclosure5.5 0.0156 Exploitation Less Likely
Routine CVE-2019-1474 Microsoft WindowsInformation Disclosure5.5 0.0156 Exploitation Less Likely
Routine CVE-2019-1488 Microsoft WindowsSecurity Feature Bypass3.3 0.0086 Exploitation Less Likely
Showing 1 to 13 of 13 1

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.