Microsoft · Security update · January 14, 2020

KB4534273: January 2020 cumulative update for Windows 10 1809

KB4534273, released January 14, 2020, fixes 34 CVEs across 9 products. 2 of them are being exploited (CVE-2020-0601); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEVKnown ransomware use
CVEs closed
34
3 rated Critical
Exploited
2
CVE-2020-0601
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.8908
99th percentile

Priority of the 34 CVEs

Patch now 2 Urgent 4 High 18 Routine 10

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems17763.973
Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems17763.973
Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems17763.973
Internet Explorer 11 on Windows Server 201917763.973
Windows 10 Version 1809 for 32-bit Systems17763.973
Windows 10 Version 1809 for ARM64-based Systems17763.973
Windows 10 Version 1809 for x64-based Systems17763.973
Windows Server 201917763.973
Windows Server 2019 (Server Core installation)17763.973

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2020-0601 Microsoft Windows Spoofing 8.1 0.8908 KEVExploited
Patch now CVE-2020-0638 Windows Update Stack Elevation of Privilege 7.8 0.0254 KEVRansomwareExploited
Urgent CVE-2020-0609 Windows RDP Remote Code Execution 9.8 0.7768 N/A
Urgent CVE-2020-0610 Windows RDP Remote Code Execution 9.8 0.6757 N/A
Urgent CVE-2020-0611 Windows RDP Remote Code Execution 7.5 0.0718 Exploitation Less Likely
Urgent CVE-2020-0634 Common Log File System Driver Elevation of Privilege 7.8 0.0132 More likely
High CVE-2020-0612 Windows RDP Denial of Service 7.5 0.0488 N/A
High CVE-2020-0642 Microsoft Graphics Component Elevation of Privilege 7.8 0.0161 Exploitation Less Likely
High CVE-2020-0635 Microsoft Windows Elevation of Privilege 7.8 0.0113 Exploitation Less Likely
High CVE-2020-0641 Windows Media Elevation of Privilege 7.8 0.0099 Exploitation Less Likely
High CVE-2020-0644 Microsoft Windows Elevation of Privilege 7.8 0.0093 Exploitation Less Likely
High CVE-2020-0613 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0091 Exploitation Less Likely
High CVE-2020-0633 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0087 Exploitation Less Likely
High CVE-2020-0614 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0086 Exploitation Less Likely
High CVE-2020-0623 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0086 Exploitation Less Likely
High CVE-2020-0625 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0086 Exploitation Less Likely
High CVE-2020-0627 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0086 Exploitation Less Likely
High CVE-2020-0628 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0086 Exploitation Less Likely
High CVE-2020-0631 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0081 Exploitation Less Likely
High CVE-2020-0620 Microsoft Windows Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
High CVE-2020-0626 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
High CVE-2020-0629 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
High CVE-2020-0630 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
High CVE-2020-0632 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
Routine CVE-2020-0640 Microsoft Scripting Engine Remote Code Execution 6.4 0.0922 Exploitation Less Likely
Showing 1 to 25 of 34 1Next