Patch days / June 2019

Microsoft Patch Tuesday — June 2019

Tuesday, 11 June 2019

Vulnerabilities: 88
Critical: 0
High: 38
Zero-days: 0
Public exploit: 10

Exploited 2

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2019-1064 Exploited Public exploit Windows Elevation of Privilege Vulnerability
EPSS 6.9%
High 7.8
CVE-2019-1069 Exploited Public exploit Task Scheduler Elevation of Privilege Vulnerability
EPSS 6.2%

Public exploit code 8

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2019-0888 Public exploit ActiveX Data Objects (ADO) Remote Code Execution Vulnerability
EPSS 11%
High 8.5
CVE-2019-1019 Public exploit Microsoft Windows Security Feature Bypass Vulnerability
EPSS 15%
High 7.6
CVE-2019-0709 Public exploit Windows Hyper-V Remote Code Execution Vulnerability
EPSS 4%
High 7.0
CVE-2019-0959 Public exploit Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 3.5%
Medium 6.3
CVE-2019-0986 Public exploit Windows User Profile Service Elevation of Privilege Vulnerability
EPSS 2.1%
Medium 5.3
CVE-2019-1040 Public exploit Windows NTLM Tampering Vulnerability
EPSS 48%
Medium 4.7
CVE-2019-0948 Public exploit Windows Event Viewer Information Disclosure Vulnerability
EPSS 13%
Unscored
CVE-2019-0943 Public exploit Windows ALPC Elevation of Privilege Vulnerability
EPSS 2.4%

All vulnerabilities 88

High38 Show

High 7.8
CVE-2019-1064 Exploited Public exploit Windows Elevation of Privilege Vulnerability
EPSS 6.9%
High 7.8
CVE-2019-1069 Exploited Public exploit Task Scheduler Elevation of Privilege Vulnerability
EPSS 6.2%
High 8.8
CVE-2019-0888 Public exploit ActiveX Data Objects (ADO) Remote Code Execution Vulnerability
EPSS 11%
High 8.8
CVE-2019-0722 Windows Hyper-V Remote Code Execution Vulnerability
EPSS 4.7%
High 8.5
CVE-2019-1019 Public exploit Microsoft Windows Security Feature Bypass Vulnerability
EPSS 15%
High 7.8
CVE-2019-0904 Jet Database Engine Remote Code Execution Vulnerability
EPSS 4.1%
High 7.8
CVE-2019-0905 Jet Database Engine Remote Code Execution Vulnerability
EPSS 4.1%
High 7.8
CVE-2019-0906 Jet Database Engine Remote Code Execution Vulnerability
EPSS 5.7%
High 7.8
CVE-2019-0907 Jet Database Engine Remote Code Execution Vulnerability
EPSS 4.1%
High 7.8
CVE-2019-0908 Jet Database Engine Remote Code Execution Vulnerability
EPSS 4.6%
High 7.8
CVE-2019-0973 Windows Installer Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2019-0974 Jet Database Engine Remote Code Execution Vulnerability
EPSS 4.1%
High 7.8
CVE-2019-0983 Windows Storage Service Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2019-0985 Microsoft Speech API Remote Code Execution Vulnerability
EPSS 3.5%
High 7.8
CVE-2019-0998 Windows Storage Service Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2019-1007 Windows Audio Service Elevation of Privilege Vulnerability
High 7.8
CVE-2019-1021 Windows Audio Service Elevation of Privilege Vulnerability
High 7.8
CVE-2019-1022 Windows Audio Service Elevation of Privilege Vulnerability
High 7.8
CVE-2019-1026 Windows Audio Service Elevation of Privilege Vulnerability
High 7.8
CVE-2019-1027 Windows Audio Service Elevation of Privilege Vulnerability
High 7.8
CVE-2019-1028 Windows Audio Service Elevation of Privilege Vulnerability
High 7.8
CVE-2019-1045 Windows Network File System Elevation of Privilege Vulnerability
EPSS 1%
High 7.8
CVE-2019-1065 Windows Kernel Elevation of Privilege Vulnerability
EPSS 1.2%
High 7.6
CVE-2019-0709 Public exploit Windows Hyper-V Remote Code Execution Vulnerability
EPSS 4%
High 7.6
CVE-2019-0620 Windows Hyper-V Remote Code Execution Vulnerability
EPSS 1.4%
High 7.5
CVE-2019-0909 Jet Database Engine Remote Code Execution Vulnerability
EPSS 3.6%
High 7.5
CVE-2019-0988 Scripting Engine Memory Corruption Vulnerability
EPSS 5.7%
High 7.5
CVE-2019-1005 Scripting Engine Memory Corruption Vulnerability
EPSS 3.3%
High 7.5
CVE-2019-1038 Microsoft Browser Memory Corruption Vulnerability
EPSS 3.3%
High 7.5
CVE-2019-1055 Scripting Engine Memory Corruption Vulnerability
EPSS 3.3%
High 7.5
CVE-2019-1080 Scripting Engine Memory Corruption Vulnerability
EPSS 3.3%
High 7.0
CVE-2019-0959 Public exploit Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 3.5%
High 7.0
CVE-2019-0960 Win32k Elevation of Privilege Vulnerability
High 7.0
CVE-2019-0984 Windows Common Log File System Driver Elevation of Privilege Vulnerability
High 7.0
CVE-2019-1014 Win32k Elevation of Privilege Vulnerability
High 7.0
CVE-2019-1017 Win32k Elevation of Privilege Vulnerability
High 7.0
CVE-2019-1018 DirectX Elevation of Privilege Vulnerability
High 7.0
CVE-2019-1041 Windows Kernel Elevation of Privilege Vulnerability
EPSS 1%

Medium41 Show

Medium 6.8
CVE-2019-0710 Windows Hyper-V Denial of Service Vulnerability
EPSS 1.9%
Medium 6.8
CVE-2019-0711 Windows Hyper-V Denial of Service Vulnerability
EPSS 1.9%
Medium 6.8
CVE-2019-0713 Windows Hyper-V Denial of Service Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2019-0972 Local Security Authority Subsystem Service Denial of Service Vulnerability
EPSS 5.8%
Medium 6.5
CVE-2019-0990 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 5.4%
Medium 6.5
CVE-2019-1023 Scripting Engine Information Disclosure Vulnerability
EPSS 5.4%
Medium 6.5
CVE-2019-1025 Windows Denial of Service Vulnerability
EPSS 5.4%
Medium 6.4
CVE-2019-1043 Comctl32 Remote Code Execution Vulnerability
EPSS 3%
Medium 6.3
CVE-2019-0986 Public exploit Windows User Profile Service Elevation of Privilege Vulnerability
EPSS 2.1%
Medium 6.3
CVE-2019-1053 Windows Shell Elevation of Privilege Vulnerability
EPSS 1.3%
Medium 5.5
CVE-2019-0968 Windows GDI Information Disclosure Vulnerability
EPSS 5.1%
Medium 5.5
CVE-2019-1039 Windows Kernel Information Disclosure Vulnerability
EPSS 1.4%
Medium 5.3
CVE-2019-1040 Public exploit Windows NTLM Tampering Vulnerability
EPSS 48%
Medium 5.3
CVE-2019-1044 Windows Secure Kernel Mode Security Feature Bypass Vulnerability
EPSS 1.1%
Medium 5.0
CVE-2019-1054 Microsoft Edge Security Feature Bypass Vulnerability
EPSS 1.6%
Medium 4.7
CVE-2019-0948 Public exploit Windows Event Viewer Information Disclosure Vulnerability
EPSS 13%
Medium 4.7
CVE-2019-0977 Windows GDI Information Disclosure Vulnerability
EPSS 4.3%
Medium 4.7
CVE-2019-1009 Windows GDI Information Disclosure Vulnerability
EPSS 48%
Medium 4.7
CVE-2019-1010 Windows GDI Information Disclosure Vulnerability
EPSS 4.3%
Medium 4.7
CVE-2019-1011 Windows GDI Information Disclosure Vulnerability
EPSS 4.3%
Medium 4.7
CVE-2019-1012 Windows GDI Information Disclosure Vulnerability
EPSS 4.3%
Medium 4.7
CVE-2019-1013 Windows GDI Information Disclosure Vulnerability
EPSS 6.6%
Medium 4.7
CVE-2019-1015 Windows GDI Information Disclosure Vulnerability
EPSS 4.3%
Medium 4.7
CVE-2019-1016 Windows GDI Information Disclosure Vulnerability
EPSS 4.3%
Medium 4.7
CVE-2019-1046 Windows GDI Information Disclosure Vulnerability
EPSS 4.3%
Medium 4.7
CVE-2019-1047 Windows GDI Information Disclosure Vulnerability
EPSS 4.3%
Medium 4.7
CVE-2019-1048 Windows GDI Information Disclosure Vulnerability
EPSS 4.3%
Medium 4.7
CVE-2019-1049 Windows GDI Information Disclosure Vulnerability
EPSS 4.3%
Medium 4.7
CVE-2019-1050 Windows GDI Information Disclosure Vulnerability
EPSS 4.3%
Medium 4.4
CVE-2019-0941 Microsoft IIS Server Denial of Service Vulnerability
EPSS 3%
Medium 4.3
CVE-2019-0920 Scripting Engine Memory Corruption Vulnerability
EPSS 5.5%
Medium 4.2
CVE-2019-0989 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 2.4%
Medium 4.2
CVE-2019-0991 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 2.5%
Medium 4.2
CVE-2019-0992 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 2.6%
Medium 4.2
CVE-2019-0993 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 2.5%
Medium 4.2
CVE-2019-1002 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 2.4%
Medium 4.2
CVE-2019-1003 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 2.4%
Medium 4.2
CVE-2019-1024 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 2.4%
Medium 4.2
CVE-2019-1051 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 4.1%
Medium 4.2
CVE-2019-1052 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 2.4%
Medium 4.2
CVE-2019-1081 Microsoft Browser Information Disclosure Vulnerability
EPSS 2.3%

Unscored9 Show

Unscored
CVE-2019-0943 Public exploit Windows ALPC Elevation of Privilege Vulnerability
EPSS 2.4%
Unscored
CVE-2019-0996 Azure DevOps Server Spoofing Vulnerability
EPSS 1.6%
Unscored
CVE-2019-1029 Skype for Business and Lync Server Denial of Service Vulnerability
EPSS 5.3%
Unscored
CVE-2019-1031 Microsoft Office SharePoint XSS Vulnerability
EPSS 1.7%
Unscored
CVE-2019-1032 Microsoft Office SharePoint XSS Vulnerability
EPSS 1.7%
Unscored
CVE-2019-1033 Microsoft Office SharePoint XSS Vulnerability
EPSS 1.7%
Unscored
CVE-2019-1034 Microsoft Word Remote Code Execution Vulnerability
EPSS 4.9%
Unscored
CVE-2019-1035 Microsoft Word Remote Code Execution Vulnerability
EPSS 6.3%
Unscored
CVE-2019-1036 Microsoft Office SharePoint XSS Vulnerability
EPSS 1.7%