January 10, 2023—KB5022289 (OS Build 14393.5648)

Highlights

• This update addresses security issues for your Windows operating system.  

Improvements

This security update includes quality improvements. When you install this KB: 

• New! This update provides the Quick Assist application for your client device.

• This update addresses an issue that might affect authentication. It might fail after you set the higher 16-bits of the msds-SupportedEncryptionTypes attribute. This issue might occur if you do not set the encryption types or you disable the RC4 encryption type on the domain.

• This update addresses an issue that affects cluster name objects (CNO) or virtual computer objects (VCO). Password reset fails. The error message is, "There was an error resetting the AD password... // 0x80070005”.

• This update introduces a Group Policy that enables and disables HTML Application (HTA) files. If you enable this policy, it stops you from running HTA files. If you disable or do not configure this policy, you can run HTA file. To configure this Group Policy:

  • Open the Group Policy Editor.

  • Select Computer Configuration > Administrative Templates > Windows Components > Internet Explorer.

  • Double-click Turn on DisableHTMLApplication.

  • Select Enabled.

  • To save the policy setting, select OK or Apply.

• This update addresses a known issue that affects apps that use Microsoft Open Database Connectivity (ODBC) SQL Server Driver (sqlsrv32.dll) to connect to databases. The connection might fail. You might also receive an error in the app, or you might receive an error from the SQL Server.

If you installed earlier updates, only the new updates contained in this package will be downloaded and installed on your device.  

For more information about security vulnerabilities, please refer to the new Security Update Guide website and the January 2023 Security Updates.

Known issues in this update

Microsoft is not currently aware of any issues with this update.

How to get this update

Special instructions for Windows Recovery Environment (WinRE) devices - updated 1/20/23

Devices with Windows Recovery Environment (WinRE) will need to update the WinRE partition to address security vulnerabilities in CVE-2022-41099. Installing the update normally into Windows will not address this security issue in WinRE. For guidance on how to address this issue in WinRE, please see CVE-2022-41099. 

Before installing this update

Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest cumulative update (LCU). SSUs improve the reliability of the update process to mitigate potential issues while installing the LCU and applying Microsoft security updates. For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions. 

If you are using Windows Update, the latest SSU (KB5017396) will be offered to you automatically. To get the standalone package for the latest SSU, search for it in the Microsoft Update Catalog. 

Install this update

File information

For a list of the files that are provided in this update, download the file information for cumulative update 5022289.