Microsoft · Security update · April 9, 2019

KB4493472: April 2019 security update

KB4493472, released April 9, 2019, fixes 37 CVEs across 8 products. 3 of them are being exploited (CVE-2019-0752); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now3 on CISA KEVKnown ransomware useUnsupported product

CVEs closed

6 rated Critical

Exploited

CVE-2019-0752

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.8168

99th percentile

Priority of the 37 CVEs

Patch now 3
                                Urgent 17
                                High 8
                                Routine 9

Applies to

Product
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2019-0752	Microsoft Scripting Engine	Remote Code Execution	6.4	0.8168	KEVRansomwareExploited
Patch now	CVE-2019-0803	Microsoft Graphics Component	Elevation of Privilege	7.0	0.4523	KEVRansomwareExploited
Patch now	CVE-2019-0859	Windows Kernel	Elevation of Privilege	7.8	0.0419	KEVRansomwareExploited
Urgent	CVE-2019-0853	Microsoft Graphics Component	Remote Code Execution	7.8	0.3005	Exploitation Less Likely
Urgent	CVE-2019-0795	Microsoft XML	Remote Code Execution	7.8	0.2132	Exploitation Less Likely
Urgent	CVE-2019-0791	Microsoft XML	Remote Code Execution	7.8	0.1818	Exploitation Less Likely
Urgent	CVE-2019-0792	Microsoft XML	Remote Code Execution	7.8	0.1818	Exploitation Less Likely
Urgent	CVE-2019-0793	Microsoft XML	Remote Code Execution	7.8	0.1818	More likely
Urgent	CVE-2019-0794	Microsoft Windows	Remote Code Execution	7.8	0.1548	More likely
Urgent	CVE-2019-0845	Microsoft Windows	Remote Code Execution	7.5	0.1481	Exploitation Less Likely
Urgent	CVE-2019-0862	Microsoft Scripting Engine	Remote Code Execution	n/a	0.1111	More likely
Urgent	CVE-2019-0753	Microsoft Scripting Engine	Remote Code Execution	6.4	0.0922	More likely
Urgent	CVE-2019-0731	Microsoft Windows	Elevation of Privilege	6.8	0.0435	More likely
Urgent	CVE-2019-0730	Microsoft Windows	Elevation of Privilege	6.7	0.0435	More likely
Urgent	CVE-2019-0836	Microsoft Windows	Elevation of Privilege	7.0	0.0430	More likely
Urgent	CVE-2019-0796	Microsoft Windows	Elevation of Privilege	6.3	0.0424	More likely
Urgent	CVE-2019-0732	Microsoft Windows	Security Feature Bypass	5.3	0.0378	More likely
Urgent	CVE-2019-0735	CSRSS	Elevation of Privilege	7.0	0.0366	More likely
Urgent	CVE-2019-0805	Microsoft Windows	Elevation of Privilege	6.7	0.0279	More likely
Urgent	CVE-2019-0844	Windows Kernel	Information Disclosure	5.5	0.0213	More likely
High	CVE-2019-0674	Microsoft Office	Remote Code Execution	7.8	0.1841	Exploitation Less Likely
High	CVE-2019-0846	Microsoft JET Database Engine	Remote Code Execution	7.8	0.1612	Exploitation Less Likely
High	CVE-2019-0847	Microsoft JET Database Engine	Remote Code Execution	7.8	0.1612	Exploitation Less Likely
High	CVE-2019-0851	Microsoft JET Database Engine	Remote Code Execution	7.8	0.1612	Exploitation Less Likely
High	CVE-2019-0671	Microsoft Office	Remote Code Execution	7.8	0.1482	Exploitation Less Likely

Released the same day

KB4462204
Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1 (32-bit editions), Microsoft Office 2013 Service Pack 1 (64-bit editions)
KB4462213
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB4462223
Microsoft Office 2010 Service Pack 2 (32-bit editions), Microsoft Office 2010 Service Pack 2 (64-bit editions)
KB4462242
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB4464504
Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1 (32-bit editions), Microsoft Office 2013 Service Pack 1 (64-bit editions)
KB4464510
Microsoft SharePoint Enterprise Server 2016
KB4464511
Microsoft SharePoint Enterprise Server 2013 Service Pack 1
KB4464515
Microsoft SharePoint Foundation 2013 Service Pack 1
KB4464518
Microsoft SharePoint Server 2019
KB4464520
Microsoft Office 2010 Service Pack 2 (32-bit editions), Microsoft Office 2010 Service Pack 2 (64-bit editions)
KB4464525
Microsoft SharePoint Server 2010 Service Pack 2
KB4464528
Microsoft SharePoint Foundation 2010 Service Pack 2

Vendor advisory

https://support.microsoft.com/help/4493472

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb4493472">KB4493472 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.