Microsoft · Security update · January 9, 2018

KB4011659: January 2018 security update

KB4011659, released January 9, 2018, fixes 15 CVEs across 2 products. 2 of them are being exploited (CVE-2018-0798); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
15
1 rated Critical
Exploited
2
CVE-2018-0798
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.9512
99th percentile

Priority of the 15 CVEs

Patch now 2 Urgent 2 High 10 Routine 1

Applies to

Product
Microsoft Word 2010 Service Pack 2 (32-bit editions)
Microsoft Word 2010 Service Pack 2 (64-bit editions)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2018-0798 Microsoft Office Remote Code Execution n/a 0.9512 KEVExploited
Patch now CVE-2018-0802 Microsoft Office Remote Code Execution n/a 0.9329 KEVRansomwareExploited
Urgent CVE-2018-0797 Microsoft Office Remote Code Execution n/a 0.2466 Exploitation Less Likely
Urgent CVE-2018-0794 Microsoft Office Remote Code Execution n/a 0.2007 More likely
High CVE-2018-0812 Microsoft Office Remote Code Execution n/a 0.2466 Exploitation Unlikely
High CVE-2018-0806 Microsoft Office Remote Code Execution n/a 0.2450 Exploitation Unlikely
High CVE-2018-0801 Microsoft Office Remote Code Execution n/a 0.2440 Exploitation Unlikely
High CVE-2018-0805 Microsoft Office Remote Code Execution n/a 0.2440 Exploitation Unlikely
High CVE-2018-0807 Microsoft Office Remote Code Execution n/a 0.2440 Exploitation Unlikely
High CVE-2018-0793 Microsoft Office Remote Code Execution n/a 0.2057 Exploitation Less Likely
High CVE-2018-0848 Microsoft Office Remote Code Execution n/a 0.2049 Exploitation Unlikely
High CVE-2018-0845 Microsoft Office Remote Code Execution n/a 0.1973 Exploitation Unlikely
High CVE-2018-0849 Microsoft Office Remote Code Execution n/a 0.1864 Exploitation Unlikely
High CVE-2018-0862 Microsoft Office Remote Code Execution n/a 0.1864 Exploitation Unlikely
Routine CVE-2018-0804 Microsoft Office Remote Code Execution n/a 0.2440 Exploitation Unlikely
Showing 1 to 15 of 15 1