Microsoft · Security update · April 9, 2019

KB4493470: April 2019 cumulative update for Windows 10 1607

KB4493470, released April 9, 2019, fixes 48 CVEs across 10 products. 3 of them are being exploited (CVE-2019-0752); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEVKnown ransomware use

CVEs closed

14 rated Critical

Exploited

CVE-2019-0752

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.8168

99th percentile

Priority of the 48 CVEs

Patch now 3
                                Urgent 27
                                High 8
                                Routine 10

Applies to

Product	Build after install
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems	14393.2906
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems	14393.2906
Internet Explorer 11 on Windows Server 2016	14393.2906
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems	14393.2906
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems	14393.2906
Microsoft Edge (EdgeHTML-based) on Windows Server 2016	14393.2906
Windows 10 Version 1607 for 32-bit Systems	14393.2906
Windows 10 Version 1607 for x64-based Systems	14393.2906
Windows Server 2016	14393.2906
Windows Server 2016 (Server Core installation)	14393.2906

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2019-0752	Microsoft Scripting Engine	Remote Code Execution	6.4	0.8168	KEVRansomwareExploited
Patch now	CVE-2019-0803	Microsoft Graphics Component	Elevation of Privilege	7.0	0.4523	KEVRansomwareExploited
Patch now	CVE-2019-0859	Windows Kernel	Elevation of Privilege	7.8	0.0419	KEVRansomwareExploited
Urgent	CVE-2019-0853	Microsoft Graphics Component	Remote Code Execution	7.8	0.3005	Exploitation Less Likely
Urgent	CVE-2019-0795	Microsoft XML	Remote Code Execution	7.8	0.2132	Exploitation Less Likely
Urgent	CVE-2019-0812	Microsoft Scripting Engine	Remote Code Execution	4.2	0.1866	More likely
Urgent	CVE-2019-0791	Microsoft XML	Remote Code Execution	7.8	0.1818	Exploitation Less Likely
Urgent	CVE-2019-0792	Microsoft XML	Remote Code Execution	7.8	0.1818	Exploitation Less Likely
Urgent	CVE-2019-0793	Microsoft XML	Remote Code Execution	7.8	0.1818	More likely
Urgent	CVE-2019-0790	Microsoft XML	Remote Code Execution	7.8	0.1620	Exploitation Less Likely
Urgent	CVE-2019-0794	Microsoft Windows	Remote Code Execution	7.8	0.1548	More likely
Urgent	CVE-2019-0845	Microsoft Windows	Remote Code Execution	7.5	0.1481	Exploitation Less Likely
Urgent	CVE-2019-0810	Microsoft Scripting Engine	Remote Code Execution	4.2	0.1153	More likely
Urgent	CVE-2019-0739	Microsoft Scripting Engine	Remote Code Execution	4.2	0.1111	More likely
Urgent	CVE-2019-0861	Microsoft Scripting Engine	Remote Code Execution	4.2	0.1111	More likely
Urgent	CVE-2019-0862	Microsoft Scripting Engine	Remote Code Execution	n/a	0.1111	More likely
Urgent	CVE-2019-0860	Microsoft Scripting Engine	Remote Code Execution	4.2	0.1080	More likely
Urgent	CVE-2019-0753	Microsoft Scripting Engine	Remote Code Execution	6.4	0.0922	More likely
Urgent	CVE-2019-0806	Microsoft Scripting Engine	Remote Code Execution	4.2	0.0896	More likely
Urgent	CVE-2019-0829	Microsoft Scripting Engine	Remote Code Execution	4.2	0.0896	More likely
Urgent	CVE-2019-0731	Microsoft Windows	Elevation of Privilege	6.8	0.0435	More likely
Urgent	CVE-2019-0730	Microsoft Windows	Elevation of Privilege	6.7	0.0435	More likely
Urgent	CVE-2019-0836	Microsoft Windows	Elevation of Privilege	7.0	0.0430	More likely
Urgent	CVE-2019-0796	Microsoft Windows	Elevation of Privilege	6.3	0.0424	More likely
Urgent	CVE-2019-0732	Microsoft Windows	Security Feature Bypass	5.3	0.0378	More likely

Released the same day

KB4462204
Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1 (32-bit editions), Microsoft Office 2013 Service Pack 1 (64-bit editions)
KB4462213
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB4462223
Microsoft Office 2010 Service Pack 2 (32-bit editions), Microsoft Office 2010 Service Pack 2 (64-bit editions)
KB4462242
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB4464504
Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1 (32-bit editions), Microsoft Office 2013 Service Pack 1 (64-bit editions)
KB4464510
Microsoft SharePoint Enterprise Server 2016
KB4464511
Microsoft SharePoint Enterprise Server 2013 Service Pack 1
KB4464515
Microsoft SharePoint Foundation 2013 Service Pack 1
KB4464518
Microsoft SharePoint Server 2019
KB4464520
Microsoft Office 2010 Service Pack 2 (32-bit editions), Microsoft Office 2010 Service Pack 2 (64-bit editions)
KB4464525
Microsoft SharePoint Server 2010 Service Pack 2
KB4464528
Microsoft SharePoint Foundation 2010 Service Pack 2

Vendor advisory

https://support.microsoft.com/help/4493470

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb4493470">KB4493470 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.