Microsoft · Security update · January 9, 2018

KB4011651: January 2018 security update

KB4011651, released January 9, 2018, fixes 12 CVEs across 5 products. One of them is being exploited (CVE-2018-0798); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product
CVEs closed
12
1 rated Critical
Exploited
1
CVE-2018-0798
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.9512
99th percentile

Priority of the 12 CVEs

Patch now 1 Urgent 2 High 8 Routine 1

Applies to

Product
Microsoft Office 2013 Service Pack 1 (32-bit editions)
Microsoft Office 2013 Service Pack 1 (64-bit editions)
Microsoft Word 2013 RT Service Pack 1
Microsoft Word 2013 Service Pack 1 (32-bit editions)
Microsoft Word 2013 Service Pack 1 (64-bit editions)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2018-0798 Microsoft Office Remote Code Execution n/a 0.9512 KEVExploited
Urgent CVE-2018-0797 Microsoft Office Remote Code Execution n/a 0.2466 Exploitation Less Likely
Urgent CVE-2018-0794 Microsoft Office Remote Code Execution n/a 0.2007 More likely
High CVE-2018-0806 Microsoft Office Remote Code Execution n/a 0.2450 Exploitation Unlikely
High CVE-2018-0805 Microsoft Office Remote Code Execution n/a 0.2440 Exploitation Unlikely
High CVE-2018-0807 Microsoft Office Remote Code Execution n/a 0.2440 Exploitation Unlikely
High CVE-2018-0793 Microsoft Office Remote Code Execution n/a 0.2057 Exploitation Less Likely
High CVE-2018-0848 Microsoft Office Remote Code Execution n/a 0.2049 Exploitation Unlikely
High CVE-2018-0845 Microsoft Office Remote Code Execution n/a 0.1973 Exploitation Unlikely
High CVE-2018-0849 Microsoft Office Remote Code Execution n/a 0.1864 Exploitation Unlikely
High CVE-2018-0862 Microsoft Office Remote Code Execution n/a 0.1864 Exploitation Unlikely
Routine CVE-2018-0804 Microsoft Office Remote Code Execution n/a 0.2440 Exploitation Unlikely
Showing 1 to 12 of 12 1