Microsoft · Security update · April 9, 2019

KB4493509: April 2019 cumulative update for Windows 10 1809

KB4493509, released April 9, 2019, fixes 52 CVEs across 13 products. 4 of them are being exploited (CVE-2019-0752); 4 on CISA KEV. Patch Radar priority: Patch now.

Patch now4 on CISA KEVKnown ransomware use

CVEs closed

15 rated Critical

Exploited

CVE-2019-0752

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.8168

99th percentile

Priority of the 52 CVEs

Patch now 4
                                Urgent 29
                                High 8
                                Routine 11

Applies to

Product	Build after install
Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems	17763.437
Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems	17763.437
Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems	17763.437
Internet Explorer 11 on Windows Server 2019	17763.437
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems	17763.437
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems	17763.437
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems	17763.437
Microsoft Edge (EdgeHTML-based) on Windows Server 2019	17763.437
Windows 10 Version 1809 for 32-bit Systems	17763.437
Windows 10 Version 1809 for ARM64-based Systems	17763.437
Windows 10 Version 1809 for x64-based Systems	17763.437
Windows Server 2019	17763.437
Windows Server 2019 (Server Core installation)	17763.437

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2019-0752	Microsoft Scripting Engine	Remote Code Execution	6.4	0.8168	KEVRansomwareExploited
Patch now	CVE-2019-0803	Microsoft Graphics Component	Elevation of Privilege	7.0	0.4523	KEVRansomwareExploited
Patch now	CVE-2019-0841	Microsoft Windows	Elevation of Privilege	6.8	0.4140	KEVRansomwareExploited
Patch now	CVE-2019-0859	Windows Kernel	Elevation of Privilege	7.8	0.0419	KEVRansomwareExploited
Urgent	CVE-2019-0853	Microsoft Graphics Component	Remote Code Execution	7.8	0.3005	Exploitation Less Likely
Urgent	CVE-2019-0795	Microsoft XML	Remote Code Execution	7.8	0.2132	Exploitation Less Likely
Urgent	CVE-2019-0812	Microsoft Scripting Engine	Remote Code Execution	4.2	0.1866	More likely
Urgent	CVE-2019-0791	Microsoft XML	Remote Code Execution	7.8	0.1818	Exploitation Less Likely
Urgent	CVE-2019-0792	Microsoft XML	Remote Code Execution	7.8	0.1818	Exploitation Less Likely
Urgent	CVE-2019-0793	Microsoft XML	Remote Code Execution	7.8	0.1818	More likely
Urgent	CVE-2019-0790	Microsoft XML	Remote Code Execution	7.8	0.1620	Exploitation Less Likely
Urgent	CVE-2019-0794	Microsoft Windows	Remote Code Execution	7.8	0.1548	More likely
Urgent	CVE-2019-0845	Microsoft Windows	Remote Code Execution	7.5	0.1481	Exploitation Less Likely
Urgent	CVE-2019-0810	Microsoft Scripting Engine	Remote Code Execution	4.2	0.1153	More likely
Urgent	CVE-2019-0739	Microsoft Scripting Engine	Remote Code Execution	4.2	0.1111	More likely
Urgent	CVE-2019-0861	Microsoft Scripting Engine	Remote Code Execution	4.2	0.1111	More likely
Urgent	CVE-2019-0862	Microsoft Scripting Engine	Remote Code Execution	n/a	0.1111	More likely
Urgent	CVE-2019-0860	Microsoft Scripting Engine	Remote Code Execution	4.2	0.1080	More likely
Urgent	CVE-2019-0753	Microsoft Scripting Engine	Remote Code Execution	6.4	0.0922	More likely
Urgent	CVE-2019-0806	Microsoft Scripting Engine	Remote Code Execution	4.2	0.0896	More likely
Urgent	CVE-2019-0829	Microsoft Scripting Engine	Remote Code Execution	4.2	0.0896	More likely
Urgent	CVE-2019-0786	Windows SMB Server	Remote Code Execution	7.8	0.0700	Exploitation Less Likely
Urgent	CVE-2019-0731	Microsoft Windows	Elevation of Privilege	6.8	0.0435	More likely
Urgent	CVE-2019-0730	Microsoft Windows	Elevation of Privilege	6.7	0.0435	More likely
Urgent	CVE-2019-0836	Microsoft Windows	Elevation of Privilege	7.0	0.0430	More likely

Released the same day

KB4462204
Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1 (32-bit editions), Microsoft Office 2013 Service Pack 1 (64-bit editions)
KB4462213
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB4462223
Microsoft Office 2010 Service Pack 2 (32-bit editions), Microsoft Office 2010 Service Pack 2 (64-bit editions)
KB4462242
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB4464504
Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1 (32-bit editions), Microsoft Office 2013 Service Pack 1 (64-bit editions)
KB4464510
Microsoft SharePoint Enterprise Server 2016
KB4464511
Microsoft SharePoint Enterprise Server 2013 Service Pack 1
KB4464515
Microsoft SharePoint Foundation 2013 Service Pack 1
KB4464518
Microsoft SharePoint Server 2019
KB4464520
Microsoft Office 2010 Service Pack 2 (32-bit editions), Microsoft Office 2010 Service Pack 2 (64-bit editions)
KB4464525
Microsoft SharePoint Server 2010 Service Pack 2
KB4464528
Microsoft SharePoint Foundation 2010 Service Pack 2

Vendor advisory

https://support.microsoft.com/help/4493509

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb4493509">KB4493509 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.