January 10, 2023—KB5022289 (OS Build 14393.5648)
Release Date:
1/10/2023
Version:
OS Build 14393.5648
Important: For Windows Recovery Environment (WinRE) devices, see the updated (1/20/23) Special instructions for Windows Recovery Environment (WinRE) devices in the How to get this update section to address security vulnerabilities in CVE-2022-41099.
1/10/23
REMINDER Today, January 10, 2023, the public extension for servicing devices that have the Intel Atom Clover Trail processor ends. This January 10, 2023 security update is the last update for these devices. After today, they will not receive monthly security and quality updates. These updates protect you from the latest security threats. Unfortunately, these devices do not meet the hardware requirements to upgrade to a newer version of Windows 10 or Windows 11. We recommend that you consider a new device that has Windows 1111/19/20 types of Windows updates and the monthly quality update types. For an overview of Windows 10, version 1607, see its update history page.
For information about Windows update terminology, see the article about theHighlights
-
This update addresses security issues for your Windows operating system.
Improvements
This security update includes quality improvements. When you install this KB:
-
New! This update provides the Quick Assist application for your client device.
-
This update addresses an issue that might affect authentication. It might fail after you set the higher 16-bits of the msds-SupportedEncryptionTypes attribute. This issue might occur if you do not set the encryption types or you disable the RC4 encryption type on the domain.
-
This update addresses an issue that affects cluster name objects (CNO) or virtual computer objects (VCO). Password reset fails. The error message is, "There was an error resetting the AD password... // 0x80070005”.
-
This update introduces a Group Policy that enables and disables HTML Application (HTA) files. If you enable this policy, it stops you from running HTA files. If you disable or do not configure this policy, you can run HTA file. To configure this Group Policy:
-
Open the Group Policy Editor.
-
Select Computer Configuration > Administrative Templates > Windows Components > Internet Explorer.
-
Double-click Turn on DisableHTMLApplication.
-
Select Enabled.
-
To save the policy setting, select OK or Apply.
-
-
This update addresses a known issue that affects apps that use Microsoft Open Database Connectivity (ODBC) SQL Server Driver (sqlsrv32.dll) to connect to databases. The connection might fail. You might also receive an error in the app, or you might receive an error from the SQL Server.
If you installed earlier updates, only the new updates contained in this package will be downloaded and installed on your device.
For more information about security vulnerabilities, please refer to the new Security Update Guide website and the January 2023 Security Updates.
Known issues in this update
Microsoft is not currently aware of any issues with this update.
How to get this update
Special instructions for Windows Recovery Environment (WinRE) devices - updated 1/20/23
Devices with Windows Recovery Environment (WinRE) will need to update the WinRE partition to address security vulnerabilities in CVE-2022-41099. Installing the update normally into Windows will not address this security issue in WinRE. For guidance on how to address this issue in WinRE, please see CVE-2022-41099.
Before installing this update
Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest cumulative update (LCU). SSUs improve the reliability of the update process to mitigate potential issues while installing the LCU and applying Microsoft security updates. For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
If you are using Windows Update, the latest SSU (KB5017396) will be offered to you automatically. To get the standalone package for the latest SSU, search for it in the Microsoft Update Catalog.
Install this update
Release Channel |
Available |
Next Step |
Windows Update and Microsoft Update |
Yes |
None. This update will be downloaded and installed automatically from Windows Update. |
Windows Update for Business |
Yes |
None. This update will be downloaded and installed automatically from Windows Update in accordance with configured policies. |
Microsoft Update Catalog |
Yes |
To get the standalone package for this update, go to the Microsoft Update Catalog website. |
Windows Server Update Services (WSUS) |
Yes |
This update will automatically sync with WSUS if you configure Products and Classifications as follows: Product: Windows 10 Classification: Security Updates |
File information
For a list of the files that are provided in this update, download the file information for cumulative update 5022289.