Microsoft · Security update · January 14, 2020

KB4534288: January 2020 security update

KB4534288, released January 14, 2020, fixes 23 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
23
3 rated Critical
Exploited
0
None reported
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.7768
99th percentile

Priority of the 23 CVEs

Patch now 0 Urgent 4 High 13 Routine 6

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2020-0609 Windows RDP Remote Code Execution 9.8 0.7768 N/A
Urgent CVE-2020-0610 Windows RDP Remote Code Execution 9.8 0.6757 N/A
Urgent CVE-2020-0611 Windows RDP Remote Code Execution 7.5 0.0718 Exploitation Less Likely
Urgent CVE-2020-0634 Common Log File System Driver Elevation of Privilege 7.8 0.0132 More likely
High CVE-2020-0642 Microsoft Graphics Component Elevation of Privilege 7.8 0.0161 Exploitation Less Likely
High CVE-2020-0635 Microsoft Windows Elevation of Privilege 7.8 0.0113 Exploitation Less Likely
High CVE-2020-0641 Windows Media Elevation of Privilege 7.8 0.0099 Exploitation Less Likely
High CVE-2020-0644 Microsoft Windows Elevation of Privilege 7.8 0.0093 Exploitation Less Likely
High CVE-2020-0625 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0086 Exploitation Less Likely
High CVE-2020-0627 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0086 Exploitation Less Likely
High CVE-2020-0628 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0086 Exploitation Less Likely
High CVE-2020-0631 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0081 Exploitation Less Likely
High CVE-2020-0620 Microsoft Windows Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
High CVE-2020-0626 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
High CVE-2020-0629 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
High CVE-2020-0630 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
High CVE-2020-0632 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
Routine CVE-2020-0607 Microsoft Graphics Component Information Disclosure 5.5 0.0634 Exploitation Less Likely
Routine CVE-2020-0637 Windows RDP Information Disclosure 5.7 0.0538 N/A
Routine CVE-2020-0615 Common Log File System Driver Information Disclosure 5.5 0.0180 Exploitation Less Likely
Routine CVE-2020-0608 Microsoft Windows Information Disclosure 5.5 0.0140 Exploitation Less Likely
Routine CVE-2020-0639 Common Log File System Driver Information Disclosure 5.5 0.0140 Exploitation Less Likely
Routine CVE-2020-0643 Microsoft Graphics Component Information Disclosure 5.5 0.0140 Exploitation Less Likely
Showing 1 to 23 of 23 1