Microsoft · Security update · January 3, 2018

KB4056890: January 2018 cumulative update for Windows 10 1607

KB4056890, released January 3, 2018, fixes 23 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
23
10 rated Critical
Exploited
0
None reported
Exploitation more likely
12
Vendor assessment
Highest EPSS
0.8080
99th percentile

Priority of the 23 CVEs

Patch now 0 Urgent 14 High 2 Routine 7

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems14393.2007
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems14393.2007
Internet Explorer 11 on Windows Server 201614393.2007
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems14393.2007
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems14393.2007
Microsoft .NET Framework 3.5 on Windows Server 201614393.2007
Microsoft .NET Framework 3.5 on Windows Server 2016 (Server Core installation)14393.2007
Microsoft .NET Framework 4.6.2/4.7 on Windows 10 Version 1607 for 32-bit Systems14393.2007
Microsoft .NET Framework 4.6.2/4.7 on Windows 10 Version 1607 for x64-based Systems14393.2007
Microsoft .NET Framework 4.6.2/4.7 on Windows Server 201614393.2007
Microsoft .NET Framework 4.6.2/4.7 on Windows Server 2016 (Server Core installation)14393.2007
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems14393.2007
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems14393.2007
Microsoft Edge (EdgeHTML-based) on Windows Server 201614393.2007
Windows 10 Version 1607 for 32-bit Systems14393.2007
Windows 10 Version 1607 for x64-based Systems14393.2007
Windows Server 201614393.2007
Windows Server 2016 (Server Core installation)14393.2007

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2018-0758 Microsoft Scripting Engine Remote Code Execution 4.2 0.8080 More likely
Urgent CVE-2018-0769 Microsoft Scripting Engine Remote Code Execution 4.2 0.7895 More likely
Urgent CVE-2018-0770 Microsoft Scripting Engine Remote Code Execution 4.2 0.7843 More likely
Urgent CVE-2018-0776 Microsoft Scripting Engine Remote Code Execution 4.2 0.7843 More likely
Urgent CVE-2018-0777 Microsoft Scripting Engine Remote Code Execution 4.2 0.7843 More likely
Urgent CVE-2018-0767 Microsoft Scripting Engine Information Disclosure 4.3 0.6547 Exploitation Unlikely
Urgent CVE-2018-0780 Microsoft Scripting Engine Information Disclosure 4.2 0.5857 More likely
Urgent CVE-2018-0744 Windows Kernel Elevation of Privilege 7.0 0.1502 More likely
Urgent CVE-2018-0762 Microsoft Browsers Remote Code Execution 4.2 0.1193 More likely
Urgent CVE-2018-0772 Microsoft Browsers Remote Code Execution 4.2 0.1193 More likely
Urgent CVE-2018-0781 Microsoft Scripting Engine Remote Code Execution 4.2 0.1115 Exploitation Unlikely
Urgent CVE-2018-0746 Windows Kernel Information Disclosure 4.7 0.0408 More likely
Urgent CVE-2018-0754 Graphic Fonts Information Disclosure 5.5 0.0228 More likely
Urgent CVE-2018-0747 Windows Kernel Information Disclosure 4.7 0.0208 More likely
High CVE-2018-0764 .NET Framework Denial of Service n/a 0.0889 Exploitation Unlikely
High CVE-2018-0786 .NET Framework Security Feature Bypass n/a 0.0369 Exploitation Unlikely
Routine CVE-2018-0753 Microsoft Windows Denial of Service 5.9 0.0902 Exploitation Unlikely
Routine CVE-2018-0766 Microsoft Edge Information Disclosure 4.3 0.0826 Exploitation Unlikely
Routine CVE-2018-0803 Microsoft Edge Elevation of Privilege 3.1 0.0366 Exploitation Unlikely
Routine CVE-2018-0749 Windows SMB Server Elevation of Privilege 6.6 0.0321 Exploitation Less Likely
Routine CVE-2018-0748 Windows Kernel Elevation of Privilege 6.6 0.0278 Exploitation Less Likely
Routine CVE-2018-0752 Windows Kernel Elevation of Privilege 6.6 0.0278 Exploitation Less Likely
Routine CVE-2018-0751 Windows Kernel Elevation of Privilege 6.6 0.0276 Exploitation Less Likely
Showing 1 to 23 of 23 1