January 4, 2018—KB4056896 (Monthly Rollup)

2018-01-0308:00:00

Microsoft

support.microsoft.com

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.085 Low

EPSS

Percentile

94.4%

JSON

January 4, 2018—KB4056896 (Monthly Rollup)

Improvements and fixes

This security update includes improvements and fixes that were a part of update KB4054520(released December 12, 2017) and addresses the following issues:

Security updates to Windows SMB Server, Windows Kernel, Windows Datacenter Networking, Windows Graphics, and Internet Explorer.
For more information about the resolved security vulnerabilities, see the Security Update Guide.

Known issues in this update

Symptom	Workaround
When calling CoInitializeSecurity, the call will fail if passing RPC_C_IMP_LEVEL_NONE under certain conditions.When calling CoInitializeSecurity, the call may fail when passing RPC_C_AUTHN_LEVEL_NONE as the authentication level. The error returned on failure is STATUS_BAD_IMPERSONATION_LEVEL.	This issue is resolved in KB4057402.

How to get this update

This update will be downloaded and installed automatically from Windows Update. To get the standalone package for this update, go to the Microsoft Update Catalog website.File informationFor a list of the files that are provided in this update, download the file information for update 4056896.