Microsoft · Security update · January 14, 2020

KB4534283: January 2020 security update

KB4534283, released January 14, 2020, fixes 24 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
24
3 rated Critical
Exploited
0
None reported
Exploitation more likely
1
Microsoft's assessment
Highest EPSS
0.7768
99th percentile

Priority of the 24 CVEs

Patch now 0 Urgent 4 High 13 Routine 7

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2020-0609 Windows RDPRemote Code Execution9.8 0.7768 N/A
Urgent CVE-2020-0610 Windows RDPRemote Code Execution9.8 0.6757 N/A
Urgent CVE-2020-0611 Windows RDPRemote Code Execution7.5 0.0718 Exploitation Less Likely
Urgent CVE-2020-0634 Common Log File System DriverElevation of Privilege7.8 0.0132 More likely
High CVE-2020-0642 Microsoft Graphics ComponentElevation of Privilege7.8 0.0161 Exploitation Less Likely
High CVE-2020-0635 Microsoft WindowsElevation of Privilege7.8 0.0113 Exploitation Less Likely
High CVE-2020-0641 Windows MediaElevation of Privilege7.8 0.0099 Exploitation Less Likely
High CVE-2020-0644 Microsoft WindowsElevation of Privilege7.8 0.0093 Exploitation Less Likely
High CVE-2020-0625 Microsoft Windows Search ComponentElevation of Privilege7.8 0.0086 Exploitation Less Likely
High CVE-2020-0627 Microsoft Windows Search ComponentElevation of Privilege7.8 0.0086 Exploitation Less Likely
High CVE-2020-0628 Microsoft Windows Search ComponentElevation of Privilege7.8 0.0086 Exploitation Less Likely
High CVE-2020-0631 Microsoft Windows Search ComponentElevation of Privilege7.8 0.0081 Exploitation Less Likely
High CVE-2020-0620 Microsoft WindowsElevation of Privilege7.8 0.0080 Exploitation Less Likely
High CVE-2020-0626 Microsoft Windows Search ComponentElevation of Privilege7.8 0.0080 Exploitation Less Likely
High CVE-2020-0629 Microsoft Windows Search ComponentElevation of Privilege7.8 0.0080 Exploitation Less Likely
High CVE-2020-0630 Microsoft Windows Search ComponentElevation of Privilege7.8 0.0080 Exploitation Less Likely
High CVE-2020-0632 Microsoft Windows Search ComponentElevation of Privilege7.8 0.0080 Exploitation Less Likely
Routine CVE-2020-0640 Microsoft Scripting EngineRemote Code Execution6.4 0.0922 Exploitation Less Likely
Routine CVE-2020-0607 Microsoft Graphics ComponentInformation Disclosure5.5 0.0634 Exploitation Less Likely
Routine CVE-2020-0637 Windows RDPInformation Disclosure5.7 0.0538 N/A
Routine CVE-2020-0615 Common Log File System DriverInformation Disclosure5.5 0.0180 Exploitation Less Likely
Routine CVE-2020-0608 Microsoft WindowsInformation Disclosure5.5 0.0140 Exploitation Less Likely
Routine CVE-2020-0639 Common Log File System DriverInformation Disclosure5.5 0.0140 Exploitation Less Likely
Routine CVE-2020-0643 Microsoft Graphics ComponentInformation Disclosure5.5 0.0140 Exploitation Less Likely
Showing 1 to 24 of 24 1

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.