Important CVSS 7.7 EPSS 0.0329 2019-10 archive

Executive Summary

A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions. An attacker who successfully exploited this vulnerability may gain access to unauthorized information. To exploit the vulnerability, an attacker would have to conduct a man-in-the-middle attack. The update addresses the vulnerability by correcting how TLS client and server establish and resume sessions with non-EMS peers.

Overview

7.7
CVSS HIGH
Important
MS Severity
Not Exploited
MS Exploit Status
Less Likely
MS Exploit Likelihood
Category Spoofing
Released Oct 8 2019
Last Updated Oct 8 2019
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.0329 — 0.86885 percentile

CVSS Vector

ATTACK VECTOR
Local
ATTACK COMPLEXITY
High
PRIVILEGES REQUIRED
Low
USER INTERACTION
None
SCOPE
Changed
Temporal Score: 6.9

EPSS Score

0.0329
probability of exploitation in the next 30 days
0.86885 percentile - updated 2026-06-20
View on FIRST.org

Affected Products

41 affected products
Product KB Article Severity Impact Restart Required
Windows 10 for 32-bit Systems 4520011 (Security Update) Important Spoofing Yes
Windows 10 for x64-based Systems 4520011 (Security Update) Important Spoofing Yes
Windows 10 Version 1607 for 32-bit Systems 4519998 (Security Update) Important Spoofing Yes
Windows 10 Version 1607 for x64-based Systems 4519998 (Security Update) Important Spoofing Yes
Windows 10 Version 1703 for 32-bit Systems 4520010 (Security Update) Important Spoofing Yes
Windows 10 Version 1703 for x64-based Systems 4520010 (Security Update) Important Spoofing Yes
Windows 10 Version 1709 for 32-bit Systems 4520004 (Security Update) Important Spoofing Yes
Windows 10 Version 1709 for ARM64-based Systems 4520004 (Security Update) Important Spoofing Yes
Windows 10 Version 1709 for x64-based Systems 4520004 (Security Update) Important Spoofing Yes
Windows 10 Version 1803 for 32-bit Systems 4520008 (Security Update) Important Spoofing Yes
Windows 10 Version 1803 for ARM64-based Systems 4520008 (Security Update) Important Spoofing Yes
Windows 10 Version 1803 for x64-based Systems 4520008 (Security Update) Important Spoofing Yes
Windows 10 Version 1809 for 32-bit Systems 4519338 (Security Update) Important Spoofing Yes
Windows 10 Version 1809 for ARM64-based Systems 4519338 (Security Update) Important Spoofing Yes
Windows 10 Version 1809 for x64-based Systems 4519338 (Security Update) Important Spoofing Yes
Windows 10 Version 1903 for 32-bit Systems 4517389 (Security Update) Important Spoofing Yes
Windows 10 Version 1903 for ARM64-based Systems 4517389 (Security Update) Important Spoofing Yes
Windows 10 Version 1903 for x64-based Systems 4517389 (Security Update) Important Spoofing Yes
Windows 7 for 32-bit Systems Service Pack 1 4519976 (Monthly Rollup) 4520003 (Security Only) Important Spoofing Yes
Windows 7 for x64-based Systems Service Pack 1 4519976 (Monthly Rollup) 4520003 (Security Only) Important Spoofing Yes
Windows 8.1 for 32-bit systems 4520005 (Monthly Rollup) 4519990 (Security Only) Important Spoofing Yes
Windows 8.1 for x64-based systems 4520005 (Monthly Rollup) 4519990 (Security Only) Important Spoofing Yes
Windows RT 8.1 4520005 (Monthly Rollup) Important Spoofing Yes
Windows Server 2008 for 32-bit Systems Service Pack 2 4520002 (Monthly Rollup) 4520009 (Security Only) Important Spoofing Yes
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 4520002 (Monthly Rollup) 4520009 (Security Only) Important Spoofing Yes
Windows Server 2008 for Itanium-Based Systems Service Pack 2 4520002 (Monthly Rollup) 4520009 (Security Only) Important Spoofing Yes
Windows Server 2008 for x64-based Systems Service Pack 2 4520002 (Monthly Rollup) 4520009 (Security Only) Important Spoofing Yes
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 4520002 (Monthly Rollup) 4520009 (Security Only) Important Spoofing Yes
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 4519976 (Monthly Rollup) 4520003 (Security Only) Important Spoofing Yes
Windows Server 2008 R2 for x64-based Systems Service Pack 1 4519976 (Monthly Rollup) 4520003 (Security Only) Important Spoofing Yes
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 4519976 (Monthly Rollup) 4520003 (Security Only) Important Spoofing Yes
Windows Server 2012 4520007 (Monthly Rollup) 4519985 (Security Only) Important Spoofing Yes
Windows Server 2012 (Server Core installation) 4520007 (Monthly Rollup) 4519985 (Security Only) Important Spoofing Yes
Windows Server 2012 R2 4520005 (Monthly Rollup) 4519990 (Security Only) Important Spoofing Yes
Windows Server 2012 R2 (Server Core installation) 4520005 (Monthly Rollup) 4519990 (Security Only) Important Spoofing Yes
Windows Server 2016 4519998 (Security Update) Important Spoofing Yes
Windows Server 2016 (Server Core installation) 4519998 (Security Update) Important Spoofing Yes
Windows Server 2019 4519338 (Security Update) Important Spoofing Yes
Windows Server 2019 (Server Core installation) 4519338 (Security Update) Important Spoofing Yes
Windows Server, version 1803 (Server Core Installation) 4520008 (Security Update) Important Spoofing Yes
Windows Server, version 1903 (Server Core installation) 4517389 (Security Update) Important Spoofing Yes

Patches

12 patches
Article Type Restart
4520011 Security Update Yes
4519998 Security Update Yes
4520010 Security Update Yes
4520004 Security Update Yes
4520008 Security Update Yes
4519338 Security Update Yes
4517389 Security Update Yes
4519976 (Monthly Rollup) 4520003 Monthly Rollup Yes
4520005 (Monthly Rollup) 4519990 Monthly Rollup Yes
4520005 Monthly Rollup Yes
4520002 (Monthly Rollup) 4520009 Monthly Rollup Yes
4520007 (Monthly Rollup) 4519985 Monthly Rollup Yes

Known Exploits

Acknowledgments

Thijs Alkemade (@xnyhps) of Computest