Microsoft · Security update · January 9, 2018
KB4011580: January 2018 security update
KB4011580, released January 9, 2018, fixes 4 CVEs across 5 products. 2 of them are being exploited (CVE-2018-0798); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now2 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
4
None rated Critical
Exploited
2
CVE-2018-0798
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.9512
99th percentile
Priority of the 4 CVEs
Patch now 2
Urgent 0
High 2
Routine 0
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2018-0798 | Microsoft Office | Remote Code Execution | n/a | 0.9512 | KEVExploited |
| Patch now | CVE-2018-0802 | Microsoft Office | Remote Code Execution | n/a | 0.9329 | KEVRansomwareExploited |
| High | CVE-2018-0812 | Microsoft Office | Remote Code Execution | n/a | 0.2466 | Exploitation Unlikely |
| High | CVE-2018-0801 | Microsoft Office | Remote Code Execution | n/a | 0.2440 | Exploitation Unlikely |
Showing 1 to 4 of 4
1