Windows 10: Microsoft Windows Security Updates December 2019 overview

Welcome to the overview of the last Patch Tuesday of 2019. Microsoft released security and non-security updates for all supported products on December 11, 2019.

Our monthly series provides system administrators and interested users with information about the updates that Microsoft released in the month that is covered. It includes statistics, links to security and non-security updates, as well as download links, and links to resources and other official pages.

Click here to access the November 2019 Microsoft Patch Day overview.

Microsoft Windows Security Updates December 2019




You may download the following (zipped) Excel spreadsheet that contains a list of released updates in December 2019: microsoft-windows-security-updates-december-2019

Executive Summary

• This is the last Patch Tuesday of 2019.
• Microsoft released security updates for all versions of Windows as well as other company products such as Microsoft Office, SQL Server, Visual Studio, and Skype for Business.
• Windows 10 version 1903 and 1909 share the same security KBs.
• Microsoft's Windows 7 operating system won't receive updates anymore after the January 2020 Patch Day (Small Businesses and Enterprises may buy extensions) Microsoft plans to display a full-screen notification on January 15, 2020 on Starter, Home Basic, Home Premium, Professional (without ESU) and Ultimate editions of Windows 7.

Operating System Distribution

• Windows 7: 14 vulnerabilities: 1 rated critical and 13 rated important
  • CVE-2019-1468 | Win32k Graphics Remote Code Execution Vulnerability
• Windows 8.1: 11 vulnerabilities: 1 rated critical and 10 rated important
  • CVE-2019-1468 | Win32k Graphics Remote Code Execution Vulnerability
• Windows 10 version 1803: 14 vulnerabilities: 2 critical and 12 important
  • CVE-2019-1468 | Win32k Graphics Remote Code Execution Vulnerability
  • CVE-2019-1471 | Windows Hyper-V Remote Code Execution Vulnerability
• Windows 10 version 1809: 15 vulnerabilities: 2 critical and 13 important
  • Same as Windows 10 version 1803
• Windows 10 version 1903: 14 vulnerabilities: 2 critical and 12 important
• Windows 10 version 1909: same as Windows 10 version 1903

Windows Server products

• Windows Server 2008 R2: 12 vulnerabilities: 1 critical and 11 important.
  • CVE-2019-1468 | Win32k Graphics Remote Code Execution Vulnerability
• Windows Server 2012 R2: 11 vulnerabilities: 1 critical and 10 important.
  • Same as Windows Server 2008 R2
• Windows Server 2016: 13 vulnerabilities: 1 critical and 12 important.
  • Same as Windows Server 2008 R2
• Windows Server 2019: 15 vulnerabilities: 22 critical and 13 are important
  • CVE-2019-1468 | Win32k Graphics Remote Code Execution Vulnerability
  • CVE-2019-1471 | Windows Hyper-V Remote Code Execution Vulnerability

Other Microsoft Products

• Internet Explorer 11: 1 vulnerability: 1 important
• Microsoft Edge: none?
• Microsoft Edge on Chromium: none?

Windows Security Updates


Windows 7 SP1 and Windows Server 2008 R2

• Monthly Rollup: KB4530734
• Security-only Update: KB4530692 -- The security-only update is only available through the Microsoft Update Catalog website and WSUS.

Changes:

• Security updates to Windows Input and Composition, Windows Virtualization, Windows Kernel, Windows Peripherals, the Microsoft Scripting Engine, and Windows Server.

Windows 8.1 and Server 2012 R2

• Monthly Rollup: KB4530702
• Security-only Update: KB4530730

Changes:

Security updates to Windows Virtualization, Windows Kernel, Windows Peripherals, the Microsoft Scripting Engine, and Windows Server.

Windows 10 version 1803

• Support article: KB4530717

Changes:

• Fixes an issue that prevented Microsoft Store from opening on Windows on Arm.
• Security updates to Windows Virtualization, Windows Kernel, Windows Peripherals, the Microsoft Scripting Engine, and Windows Server

Windows 10 version 1809

• Support article: KB4530715

Changes:

• Fixed a diagnostic data processing issue for devices on which the setting was set to Basic.
• Same as Windows 10 version 1803.

Windows 10 version 1903

• Support article: KB4530684

Changes:

• Fixed an issue that could cause error 0x3B in cldflt.sys on some devices.
• Fixed an issue that could prevent the creation of local user accounts when IME is used.
• Security updates to Windows Virtualization, Windows Kernel, the Microsoft Scripting Engine, and Windows Server.

Windows 10 version 1909

• Support article: KB4530684

Changes:

• Same as Windows 10 version 1903

Other security updates

KB4530677 -- 2019-12 Cumulative Security Update for Internet Explorer

KB4530691 -- 2019-12 Security Monthly Quality Rollup for Windows Embedded 8 Standard, and Windows Server 2012

KB4530695 -- 2019-12 Security Monthly Quality Rollup for Windows Server 2008

KB4530698 -- 2019-12 Security Only Quality Update for Windows Embedded 8 Standard, and Windows Server 2012

KB4530719 -- 2019-12 Security Only Quality Update for Windows Server 2008

KB4530681 -- 2019-12 Cumulative Update for Windows 10 Version 1507

KB4530689 -- 2019-12 Cumulative Update for Windows 10 Version 1607

KB4530711 -- 2019-12 Cumulative Update for Windows 10 Version 1703

KB4530714 -- 2019-12 Cumulative Update for Windows 10 Version 1709

KB4531787 -- 2019-12 Servicing Stack Update for Windows Server 2008

KB4532920 -- 2019-12 Servicing Stack Update for Windows Embedded 8 Standard, and Windows Server 2012

Known Issues


Windows 7 SP1 and Server 2008 R2:

Microsoft does not list any known issues on the KB support article but the release notes state that there is an (unnamed) issue.

Windows 8.1 and Server 2012 R2:

• Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail

Windows 10 version 1803:

• Same as Windows 8.1 and Server 2012 R2.
• Problem creating local user accounts during the Out of Box Experienced when using Input Method Editor (IME).

Windows 10 version 1809:

• Same as Windows 10 version 1803
• Devices with "some" Asian language packs may throw error 0x800f0982 - PSFX_E_MATCHING_COMPONENT_NOT_FOUND.

Security advisories and updates


ADV990001 | Latest Servicing Stack Updates

ADV190026 | Microsoft Guidance for cleaning up orphaned keys generated on vulnerable TPMs and used for Windows Hello for Business

Non-security related updates


KB4532997 -- 2019-12 Cumulative Update for .NET Framework 4.8 Windows 10 Version 1607, and Windows Server 2016

KB4532998 -- 2019-12 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1703

KB4532999 -- 2019-12 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1709

KB4533000 --2019-12 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1903,and Windows Server 2016

KB4533001 -- 2019-12 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1809, and Windows Server 2019

KB4533002 -- 2019-12 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server, version 1909 and Windows 10 Version 1909

KB4533013 -- 2019-12 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809, and Windows Server 2019

KB4533094 -- 2019-12 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10 Version 1809, and Windows Server 2019

KB4533003 -- 2019-12 Security and Quality Rollup for .NET Framework 4.8 for Windows Embedded 8 Standard, and Windows Server 2012

KB4533004 -- 2019-12 Security and Quality Rollup for .NET Framework 4.8 for Windows 8.1, and Windows Server 2012 R2

KB4533005 -- 2019-12 Security and Quality Rollup for .NET Framework 4.8 for Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2

KB4533010 -- 2019-12 Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard, and Windows Server 2012

KB4533011 -- 2019-12 Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1 , and Windows Server 2012 R2

KB4533012 -- 2019-12 Security and Quality Rollup for .NET Framework 4.6 for Windows Embedded Standard 7, Windows 7, Windows Server 2008 R2, and Windows Server 2008

KB4533095 -- 2019-12 Security and Quality Rollup for .NET Framework 3.5.1 on Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2

KB4533096 -- 2019-12 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 8 Standard, and Windows Server 2012

KB4533097 -- 2019-12 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2

KB4533098 -- 2019-12 Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008

KB890830 -- Windows Malicious Software Removal Tool - December 2019

Microsoft Office Updates


You find Office update information here.

How to download and install the December 2019 security updates


Security updates are downloaded and installed automatically on most (Home) Windows systems. Windows runs checks for updates regularly to download and install security updates released by Microsoft.

Windows administrators may run manual checks for updates to speed up the process or download patches from the Microsoft Update Catalog website.

Note: we recommend that backups are created before updates are installed.

Do this to run a manual check for updates:

1. Open the Start Menu of the Windows operating system, type Windows Update and select the result.
2. Select check for updates in the application that opens. Updates may be installed automatically when they are found or offered by Windows; this depends on the operating system and version that is used, and update settings.

Direct update downloads


Windows 7 SP1 and Windows Server 2008 R2 SP

• KB4530734 -- 2019-12 Security Monthly Quality Rollup for Windows 7
• KB4530692 -- 2019-12 Security Only Quality Update for Windows 7

Windows 8.1 and Windows Server 2012 R2

• KB4530702 -- 2019-12 Security Monthly Quality Rollup for Windows 8.1
• KB4530730 -- 2019-12 Security Only Quality Update for Windows 8.1

Windows 10 (version 1803)

• KB4530717 -- 2019-12 Cumulative Update for Windows 10 Version 1809

Windows 10 (version 1809)

• KB4530715 -- 2019-12 Cumulative Update for Windows 10 Version 1809

Windows 10 (version 1903)

• KB4530684 -- 2019-12 Cumulative Update for Windows 10 Version 1903

Windows 10 (version 1909)

• KB4530684 -- 2019-12 Cumulative Update for Windows 10 Version 1909

Additional resources

• December 2019 Security Updates release notes
• List of software updates for Microsoft products
• List of the latest Windows Updates and Services Packs
• Security Updates Guide
• Microsoft Update Catalog site
• Our in-depth Windows update guide
• How to install optional updates on Windows 10
• Windows 10 Update History
• Windows 8.1 Update History
• Windows 7 Update History

Thank you for being a Ghacks reader. The post Microsoft Windows Security Updates December 2019 overview appeared first on gHacks Technology News.

read more...

 

Microsoft February 2019 Security Updates

Release Notes

February 2019 Security Updates

Release Date: February 12, 2019

The February security release consists of security updates for the following software:

Adobe Flash Player

Internet Explorer

Microsoft Edge

Microsoft Windows

Microsoft Office and Microsoft Office Services and Web Apps

ChakraCore

.NET Framework

Microsoft Exchange Server

Microsoft Visual Studio

Azure IoT SDK

Microsoft Dynamics

Team Foundation Server

Visual Studio Code

Please note the following information regarding the security updates:

A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.

Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.

Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.

For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.

In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.

The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates.

ADV190003

ADV190007 *

ADV990001

CVE-2019-0540 *

CVE-2019-0600

CVE-2019-0601

CVE-2019-0602

CVE-2019-0615

CVE-2019-0616

CVE-2019-0619

CVE-2019-0621

CVE-2019-0628

CVE-2019-0635

CVE-2019-0636

CVE-2019-0643

CVE-2019-0648

CVE-2019-0658

CVE-2019-0660

CVE-2019-0661

CVE-2019-0664

CVE-2019-0669

CVE-2019-0676

CVE-2019-0686 *

CVE-2019-0724 *

CVE-2019-0741

Known Issues

44****2

{{windowTitle}}

 

Microsoft January 2019 Security Updates

Release Notes
January 2019 Security Updates

Release Date: January 08, 2019

The January security release consists of security updates for the following software:

• Adobe Flash Player
• Internet Explorer
• Microsoft Edge
• Microsoft Windows
• Microsoft Office and Microsoft Office Services and Web Apps
• ChakraCore
• .NET Framework
• ASP.NET
• Microsoft Exchange Server
• Microsoft Visual Studio

Please note the following information regarding the security updates:

• A list of the latest servicing stack updates for each operating system can be found in
  
  ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the
  
  Microsoft Update Catalog.
• Updates for Windows RT 8.1 and Microsoft Office RT software are only available via
  
  Windows Update.
• For information on lifecycle and support dates for Windows 10 operating systems, please see
  
  Windows Lifecycle Facts Sheet.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.

The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates.

• ADV190001
• CVE-2019-0536
• CVE-2019-0537
• CVE-2019-0545
• CVE-2019-0549
• CVE-2019-0553
• CVE-2019-0554
• CVE-2019-0559
• CVE-2019-0560
• CVE-2019-0561
• CVE-2019-0569
• CVE-2019-0585
• CVE-2019-0588

Known Issues

• 4480961
• 4480973
• 4480978
• 4480966
• 4480970
• 4480116
• 4480962
• 4480963
• 4480975
• 4468742
• 4471389

{{windowTitle}}

 

microsoft June 2019 Security Updates

Release Notes

June 2019 Security Updates

Release Date: June 11, 2019

The June security release consists of security updates for the following software:

Adobe Flash Player

Microsoft Windows

Internet Explorer

Microsoft Edge

Microsoft Office and Microsoft Office Services and Web Apps

ChakraCore

Skype for Business and Microsoft Lync

Microsoft Exchange Server

Azure

Please note the following information regarding the security updates:

A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.

Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.

Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.

For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.

In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.

The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates. Please note that this is not a complete list of CVEs for this release.

ADV190015

ADV990001

CVE-2019-0904

CVE-2019-0905

CVE-2019-0906

CVE-2019-0907

CVE-2019-0908

CVE-2019-0909

CVE-2019-0948

CVE-2019-0968

CVE-2019-0974

CVE-2019-0977

CVE-2019-0990

CVE-2019-1009

CVE-2019-1010

CVE-2019-1011

CVE-2019-1012

CVE-2019-1013

CVE-2019-1015

CVE-2019-1016

CVE-2019-1023

CVE-2019-1031

CVE-2019-1032

CVE-2019-1033

CVE-2019-1034

CVE-2019-1035

CVE-2019-1036

CVE-2019-1039

CVE-2019-1046

CVE-2019-1047

CVE-2019-1048

CVE-2019-1049

CVE-2019-1050

CVE-2019-1081

Known Issues

KB Article Applies To

4493730 Windows Server 2008 Service Pack 2 Servicing stack update

4503027 Exchange Server 2019, Exchange Server 2016

4503028 Exchange Server 2010 Service Pack 3, Exchange Server 2013

4503263 Windows Server 2012 (Security-only update)

4503267 Windows 10, version 1607, Windows Server 2016

4503276 Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)

4503279 Windows 10, version 1703

4503284 Windows 10, version 1709

4503285 Windows Server 2012 (Monthly Rollup)

4503286 Windows 10, version 1803

4503290 Windows 8.1 Windows Server 2012 R2 (Security-only update)

4503291 Windows 10

4503292 Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Security-only update)

4503293 Windows 10, version 1903

4503327 Windows 10, version 1809, Windows Server 2019

{{windowTitle}}