Microsoft · Security update · January 14, 2020

KB4534297: January 2020 security update

KB4534297, released January 14, 2020, fixes 27 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
27
3 rated Critical
Exploited
0
None reported
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.7768
99th percentile

Priority of the 27 CVEs

Patch now 0 Urgent 4 High 16 Routine 7

Applies to

Product
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows Server 2012 R2
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2020-0609 Windows RDP Remote Code Execution 9.8 0.7768 N/A
Urgent CVE-2020-0610 Windows RDP Remote Code Execution 9.8 0.6757 N/A
Urgent CVE-2020-0611 Windows RDP Remote Code Execution 7.5 0.0718 Exploitation Less Likely
Urgent CVE-2020-0634 Common Log File System Driver Elevation of Privilege 7.8 0.0132 More likely
High CVE-2020-0642 Microsoft Graphics Component Elevation of Privilege 7.8 0.0161 Exploitation Less Likely
High CVE-2020-0635 Microsoft Windows Elevation of Privilege 7.8 0.0113 Exploitation Less Likely
High CVE-2020-0641 Windows Media Elevation of Privilege 7.8 0.0099 Exploitation Less Likely
High CVE-2020-0644 Microsoft Windows Elevation of Privilege 7.8 0.0093 Exploitation Less Likely
High CVE-2020-0613 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0091 Exploitation Less Likely
High CVE-2020-0614 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0086 Exploitation Less Likely
High CVE-2020-0623 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0086 Exploitation Less Likely
High CVE-2020-0625 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0086 Exploitation Less Likely
High CVE-2020-0627 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0086 Exploitation Less Likely
High CVE-2020-0628 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0086 Exploitation Less Likely
High CVE-2020-0631 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0081 Exploitation Less Likely
High CVE-2020-0620 Microsoft Windows Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
High CVE-2020-0626 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
High CVE-2020-0629 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
High CVE-2020-0630 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
High CVE-2020-0632 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
Routine CVE-2020-0640 Microsoft Scripting Engine Remote Code Execution 6.4 0.0922 Exploitation Less Likely
Routine CVE-2020-0607 Microsoft Graphics Component Information Disclosure 5.5 0.0634 Exploitation Less Likely
Routine CVE-2020-0637 Windows RDP Information Disclosure 5.7 0.0538 N/A
Routine CVE-2020-0615 Common Log File System Driver Information Disclosure 5.5 0.0180 Exploitation Less Likely
Routine CVE-2020-0608 Microsoft Windows Information Disclosure 5.5 0.0140 Exploitation Less Likely
Showing 1 to 25 of 27 1Next