Microsoft · Security update · January 18, 2018
KB4056894: January 2018 security update
KB4056894, released January 18, 2018, fixes 9 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
9
2 rated Critical
Exploited
0
None reported
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.1193
96th percentile
Priority of the 9 CVEs
Patch now 0
Urgent 6
High 0
Routine 3
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2018-0762 | Microsoft Browsers | Remote Code Execution | 4.2 | 0.1193 | More likely |
| Urgent | CVE-2018-0772 | Microsoft Browsers | Remote Code Execution | 4.2 | 0.1193 | More likely |
| Urgent | CVE-2018-0754 | Graphic Fonts | Information Disclosure | 5.5 | 0.0228 | More likely |
| Urgent | CVE-2018-0747 | Windows Kernel | Information Disclosure | 4.7 | 0.0208 | More likely |
| Urgent | CVE-2018-0750 | Microsoft Graphics Component | Information Disclosure | 5.5 | 0.0170 | More likely |
| Urgent | CVE-2018-0788 | Graphic Fonts | Information Disclosure | 7.0 | 0.0112 | More likely |
| Routine | CVE-2018-0741 | Microsoft Graphics Component | Information Disclosure | 5.5 | 0.0723 | N/A |
| Routine | CVE-2018-0749 | Windows SMB Server | Elevation of Privilege | 6.6 | 0.0321 | Exploitation Less Likely |
| Routine | CVE-2018-0748 | Windows Kernel | Elevation of Privilege | 6.6 | 0.0278 | Exploitation Less Likely |
Showing 1 to 9 of 9
1