Microsoft · Security update · January 10, 2018

KB4011022: January 2018 security update

KB4011022, released January 10, 2018, fixes 2 CVEs in Microsoft Office Online Server 2016. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
2
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2834
98th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 1 High 1 Routine 0

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2018-0797 Microsoft Office Remote Code Execution n/a 0.2466 Exploitation Less Likely
High CVE-2018-0792 Microsoft Office Remote Code Execution n/a 0.2834 Exploitation Less Likely
Showing 1 to 2 of 2 1