Patch days / August 2019

Microsoft Patch Tuesday — August 2019

Tuesday, 13 August 2019

Vulnerabilities: 88
Critical: 8
High: 40
Zero-days: 0
Public exploit: 11

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 8

Critical 9.8
CVE-2019-0736 Windows DHCP Client Remote Code Execution Vulnerability
EPSS 4%
Critical 9.8
CVE-2019-1181 Remote Desktop Services Remote Code Execution Vulnerability
EPSS 78%
Critical 9.8
CVE-2019-1182 Remote Desktop Services Remote Code Execution Vulnerability
EPSS 17%
Critical 9.8
CVE-2019-1205 Microsoft Word Remote Code Execution Vulnerability
EPSS 4%
Critical 9.8
CVE-2019-1212 Windows DHCP Server Denial of Service Vulnerability
EPSS 6.7%
Critical 9.8
CVE-2019-1213 Windows DHCP Server Remote Code Execution Vulnerability
EPSS 4.2%
Critical 9.8
CVE-2019-1222 Remote Desktop Services Remote Code Execution Vulnerability
EPSS 7.6%
Critical 9.8
CVE-2019-1226 Remote Desktop Services Remote Code Execution Vulnerability
EPSS 8.2%

Public exploit code 11

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2019-1144 Public exploit Microsoft Graphics Remote Code Execution Vulnerability
EPSS 13%
High 8.8
CVE-2019-1145 Public exploit Microsoft Graphics Remote Code Execution Vulnerability
EPSS 13%
High 8.8
CVE-2019-1149 Public exploit Microsoft Graphics Remote Code Execution Vulnerability
EPSS 14%
High 8.8
CVE-2019-1150 Public exploit Microsoft Graphics Remote Code Execution Vulnerability
EPSS 26%
High 8.8
CVE-2019-1151 Public exploit Microsoft Graphics Remote Code Execution Vulnerability
EPSS 15%
High 8.8
CVE-2019-1152 Public exploit Microsoft Graphics Remote Code Execution Vulnerability
EPSS 13%
High 7.9
CVE-2019-1170 Public exploit Windows NTFS Elevation of Privilege Vulnerability
EPSS 2.4%
Medium 6.7
CVE-2019-1184 Public exploit Windows Elevation of Privilege Vulnerability
EPSS 70%
Medium 5.5
CVE-2019-1148 Public exploit Microsoft Graphics Component Information Disclosure Vulnerability
EPSS 2.8%
Medium 5.5
CVE-2019-1153 Public exploit Microsoft Graphics Component Information Disclosure Vulnerability
EPSS 2.8%
Unscored
CVE-2019-1218 Public exploit Outlook iOS Spoofing Vulnerability
EPSS 3.9%

All vulnerabilities 88

Critical8 Show

Critical 9.8
CVE-2019-0736 Windows DHCP Client Remote Code Execution Vulnerability
EPSS 4%
Critical 9.8
CVE-2019-1181 Remote Desktop Services Remote Code Execution Vulnerability
EPSS 78%
Critical 9.8
CVE-2019-1182 Remote Desktop Services Remote Code Execution Vulnerability
EPSS 17%
Critical 9.8
CVE-2019-1205 Microsoft Word Remote Code Execution Vulnerability
EPSS 4%
Critical 9.8
CVE-2019-1212 Windows DHCP Server Denial of Service Vulnerability
EPSS 6.7%
Critical 9.8
CVE-2019-1213 Windows DHCP Server Remote Code Execution Vulnerability
EPSS 4.2%
Critical 9.8
CVE-2019-1222 Remote Desktop Services Remote Code Execution Vulnerability
EPSS 7.6%
Critical 9.8
CVE-2019-1226 Remote Desktop Services Remote Code Execution Vulnerability
EPSS 8.2%

High40 Show

High 8.8
CVE-2019-1144 Public exploit Microsoft Graphics Remote Code Execution Vulnerability
EPSS 13%
High 8.8
CVE-2019-1145 Public exploit Microsoft Graphics Remote Code Execution Vulnerability
EPSS 13%
High 8.8
CVE-2019-1149 Public exploit Microsoft Graphics Remote Code Execution Vulnerability
EPSS 14%
High 8.8
CVE-2019-1150 Public exploit Microsoft Graphics Remote Code Execution Vulnerability
EPSS 26%
High 8.8
CVE-2019-1151 Public exploit Microsoft Graphics Remote Code Execution Vulnerability
EPSS 15%
High 8.8
CVE-2019-1152 Public exploit Microsoft Graphics Remote Code Execution Vulnerability
EPSS 13%
High 8.8
CVE-2019-1140 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 3.8%
High 8.8
CVE-2019-1258 Azure Active Directory Authentication Library Elevation of Privilege Vulnerability
EPSS 3.8%
High 8.0
CVE-2019-0720 Hyper-V Remote Code Execution Vulnerability
EPSS 3.8%
High 7.9
CVE-2019-1170 Public exploit Windows NTFS Elevation of Privilege Vulnerability
EPSS 2.4%
High 7.8
CVE-2019-1146 Jet Database Engine Remote Code Execution Vulnerability
EPSS 4.5%
High 7.8
CVE-2019-1147 Jet Database Engine Remote Code Execution Vulnerability
EPSS 4.3%
High 7.8
CVE-2019-1155 Jet Database Engine Remote Code Execution Vulnerability
EPSS 4.3%
High 7.8
CVE-2019-1156 Jet Database Engine Remote Code Execution Vulnerability
EPSS 4.3%
High 7.8
CVE-2019-1157 Jet Database Engine Remote Code Execution Vulnerability
EPSS 4.5%
High 7.8
CVE-2019-1159 Windows Kernel Elevation of Privilege Vulnerability
EPSS 11%
High 7.8
CVE-2019-1162 Windows ALPC Elevation of Privilege Vulnerability
High 7.8
CVE-2019-1164 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2019-1168 Microsoft Windows p2pimsvc Elevation of Privilege Vulnerability
High 7.8
CVE-2019-1169 Win32k Elevation of Privilege Vulnerability
EPSS 1%
High 7.8
CVE-2019-1190 Windows Image Elevation of Privilege Vulnerability
EPSS 1%
High 7.6
CVE-2019-0965 Windows Hyper-V Remote Code Execution Vulnerability
EPSS 1.3%
High 7.5
CVE-2019-1057 MS XML Remote Code Execution Vulnerability
EPSS 3.1%
High 7.5
CVE-2019-1133 Scripting Engine Memory Corruption Vulnerability
EPSS 3.3%
High 7.5
CVE-2019-1188 LNK Remote Code Execution Vulnerability
EPSS 3.7%
High 7.5
CVE-2019-1194 Scripting Engine Memory Corruption Vulnerability
EPSS 3.4%
High 7.5
CVE-2019-1206 Windows DHCP Server Denial of Service Vulnerability
EPSS 5.3%
High 7.5
CVE-2019-1223 Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability
EPSS 5.1%
High 7.5
CVE-2019-1224 Remote Desktop Protocol Server Information Disclosure Vulnerability
EPSS 8.4%
High 7.5
CVE-2019-1225 Remote Desktop Protocol Server Information Disclosure Vulnerability
EPSS 11%
High 7.3
CVE-2019-1185 Windows Subsystem for Linux Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.0
CVE-2019-1173 Windows Elevation of Privilege Vulnerability
High 7.0
CVE-2019-1174 Windows Elevation of Privilege Vulnerability
High 7.0
CVE-2019-1175 Windows Elevation of Privilege Vulnerability
High 7.0
CVE-2019-1176 DirectX Elevation of Privilege Vulnerability
High 7.0
CVE-2019-1177 Windows Elevation of Privilege Vulnerability
High 7.0
CVE-2019-1178 Windows Elevation of Privilege Vulnerability
High 7.0
CVE-2019-1179 Windows Elevation of Privilege Vulnerability
High 7.0
CVE-2019-1180 Windows Elevation of Privilege Vulnerability
High 7.0
CVE-2019-1186 Windows Elevation of Privilege Vulnerability

Medium29 Show

Medium 6.7
CVE-2019-1184 Public exploit Windows Elevation of Privilege Vulnerability
EPSS 70%
Medium 6.5
CVE-2019-1198 Microsoft Windows Elevation of Privilege Vulnerability
EPSS 1.9%
Medium 6.4
CVE-2019-1193 Microsoft Browser Memory Corruption Vulnerability
EPSS 3.1%
Medium 5.8
CVE-2019-0714 Windows Hyper-V Denial of Service Vulnerability
EPSS 5%
Medium 5.8
CVE-2019-0715 Windows Hyper-V Denial of Service Vulnerability
EPSS 5%
Medium 5.8
CVE-2019-0716 Windows Denial of Service Vulnerability
EPSS 4.4%
Medium 5.8
CVE-2019-0717 Windows Hyper-V Denial of Service Vulnerability
EPSS 5.1%
Medium 5.8
CVE-2019-0718 Windows Hyper-V Denial of Service Vulnerability
EPSS 5%
Medium 5.8
CVE-2019-0723 Windows Hyper-V Denial of Service Vulnerability
EPSS 5%
Medium 5.6
CVE-2019-1171 SymCrypt Information Disclosure Vulnerability
EPSS 1.4%
Medium 5.5
CVE-2019-1148 Public exploit Microsoft Graphics Component Information Disclosure Vulnerability
EPSS 2.8%
Medium 5.5
CVE-2019-1153 Public exploit Microsoft Graphics Component Information Disclosure Vulnerability
EPSS 2.8%
Medium 5.5
CVE-2019-1078 Microsoft Graphics Component Information Disclosure Vulnerability
EPSS 1.6%
Medium 5.5
CVE-2019-1143 Windows Graphics Component Information Disclosure Vulnerability
EPSS 1.7%
Medium 5.5
CVE-2019-1154 Windows Graphics Component Information Disclosure Vulnerability
EPSS 1.7%
Medium 5.5
CVE-2019-1158 Windows Graphics Component Information Disclosure Vulnerability
EPSS 1.7%
Medium 5.5
CVE-2019-1163 Windows File Signature Security Feature Bypass Vulnerability
EPSS 1.5%
Medium 5.5
CVE-2019-1187 XmlLite Runtime Denial of Service Vulnerability
EPSS 3.1%
Medium 5.5
CVE-2019-1227 Windows Kernel Information Disclosure Vulnerability
EPSS 1.7%
Medium 5.5
CVE-2019-1228 Windows Kernel Information Disclosure Vulnerability
EPSS 1.7%
Medium 4.3
CVE-2019-1030 Microsoft Edge based on Edge HTML Information Disclosure Vulnerability
EPSS 6.1%
Medium 4.3
CVE-2019-1172 Windows Information Disclosure Vulnerability
EPSS 4%
Medium 4.3
CVE-2019-1192 Microsoft Browsers Security Feature Bypass Vulnerability
EPSS 3.7%
Medium 4.2
CVE-2019-1131 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 1.9%
Medium 4.2
CVE-2019-1139 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 1.9%
Medium 4.2
CVE-2019-1141 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 1.9%
Medium 4.2
CVE-2019-1195 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 1.9%
Medium 4.2
CVE-2019-1196 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 1.9%
Medium 4.2
CVE-2019-1197 Chakra Scripting Engine Memory Corruption Vulnerability
EPSS 1.9%

Unscored11 Show

Unscored
CVE-2019-1218 Public exploit Outlook iOS Spoofing Vulnerability
EPSS 3.9%
Unscored
CVE-2019-1161 Microsoft Defender Elevation of Privilege Vulnerability
Unscored
CVE-2019-1183 Windows VBScript Engine Remote Code Execution Vulnerability
EPSS 4.8%
Unscored
CVE-2019-1199 Microsoft Outlook Memory Corruption Vulnerability
EPSS 4.6%
Unscored
CVE-2019-1200 Microsoft Outlook Remote Code Execution Vulnerability
EPSS 4.6%
Unscored
CVE-2019-1201 Microsoft Word Remote Code Execution Vulnerability
EPSS 4.9%
Unscored
CVE-2019-1202 SharePoint Information Disclosure Vulnerability
EPSS 1.6%
Unscored
CVE-2019-1203 Microsoft Office SharePoint XSS Vulnerability
EPSS 1.7%
Unscored
CVE-2019-1204 Microsoft Outlook Elevation of Privilege Vulnerability
EPSS 4.4%
Unscored
CVE-2019-1211 Git for Visual Studio Elevation of Privilege Vulnerability
EPSS 1.7%
Unscored
CVE-2019-1229 Dynamics On-Premise Elevation of Privilege Vulnerability
EPSS 3.5%