Microsoft · Security update · January 9, 2018

KB4011610: January 2018 security update

KB4011610, released January 9, 2018, fixes 12 CVEs across 2 products. 2 of them are being exploited (CVE-2018-0798); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
12
None rated Critical
Exploited
2
CVE-2018-0798
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.9512
99th percentile

Priority of the 12 CVEs

Patch now 2 Urgent 0 High 9 Routine 1

Applies to

Product
Microsoft Office 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (64-bit editions)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2018-0798 Microsoft Office Remote Code Execution n/a 0.9512 KEVExploited
Patch now CVE-2018-0802 Microsoft Office Remote Code Execution n/a 0.9329 KEVRansomwareExploited
High CVE-2018-0812 Microsoft Office Remote Code Execution n/a 0.2466 Exploitation Unlikely
High CVE-2018-0806 Microsoft Office Remote Code Execution n/a 0.2450 Exploitation Unlikely
High CVE-2018-0801 Microsoft Office Remote Code Execution n/a 0.2440 Exploitation Unlikely
High CVE-2018-0805 Microsoft Office Remote Code Execution n/a 0.2440 Exploitation Unlikely
High CVE-2018-0807 Microsoft Office Remote Code Execution n/a 0.2440 Exploitation Unlikely
High CVE-2018-0848 Microsoft Office Remote Code Execution n/a 0.2049 Exploitation Unlikely
High CVE-2018-0845 Microsoft Office Remote Code Execution n/a 0.1973 Exploitation Unlikely
High CVE-2018-0849 Microsoft Office Remote Code Execution n/a 0.1864 Exploitation Unlikely
High CVE-2018-0862 Microsoft Office Remote Code Execution n/a 0.1864 Exploitation Unlikely
Routine CVE-2018-0804 Microsoft Office Remote Code Execution n/a 0.2440 Exploitation Unlikely
Showing 1 to 12 of 12 1