Microsoft · Security update · January 18, 2018

KB4056895: January 2018 security update

KB4056895, released January 18, 2018, fixes 12 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
12
2 rated Critical
Exploited
0
None reported
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.1502
96th percentile

Priority of the 12 CVEs

Patch now 0 Urgent 7 High 0 Routine 5

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2018-0744 Windows Kernel Elevation of Privilege 7.0 0.1502 More likely
Urgent CVE-2018-0762 Microsoft Browsers Remote Code Execution 4.2 0.1193 More likely
Urgent CVE-2018-0772 Microsoft Browsers Remote Code Execution 4.2 0.1193 More likely
Urgent CVE-2018-0746 Windows Kernel Information Disclosure 4.7 0.0408 More likely
Urgent CVE-2018-0754 Graphic Fonts Information Disclosure 5.5 0.0228 More likely
Urgent CVE-2018-0747 Windows Kernel Information Disclosure 4.7 0.0208 More likely
Urgent CVE-2018-0788 Graphic Fonts Information Disclosure 7.0 0.0112 More likely
Routine CVE-2018-0753 Microsoft Windows Denial of Service 5.9 0.0902 Exploitation Unlikely
Routine CVE-2018-0749 Windows SMB Server Elevation of Privilege 6.6 0.0321 Exploitation Less Likely
Routine CVE-2018-0748 Windows Kernel Elevation of Privilege 6.6 0.0278 Exploitation Less Likely
Routine CVE-2018-0752 Windows Kernel Elevation of Privilege 6.6 0.0278 Exploitation Less Likely
Routine CVE-2018-0751 Windows Kernel Elevation of Privilege 6.6 0.0276 Exploitation Less Likely
Showing 1 to 12 of 12 1