Windows 10: Microsoft December 2018 Security Updates

Security Update Guide > Release Notes
Release Notes
December 2018 Security Updates
Release Date: December 11, 2018


The December security release consists of security updates for the following software:

• Adobe Flash Player
• Internet Explorer
• Microsoft Edge
• Microsoft Windows
• Microsoft Office and Microsoft Office Services and Web Apps
• ChakraCore
• .NET Framework
• Microsoft Dynamics NAV
• Microsoft Exchange Server
• Microsoft Visual Studio
• Windows Azure Pack (WAP)

Please note the following information regarding the security updates:

• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
• Starting in March 2017, a delta package will be available on the Microsoft Update Catalog for Windows 10 version 1607 and newer. This delta package contains just the delta changes between the previous month and the current release.
• Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
• For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.

The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates.

• CVE-2018-8477
• CVE-2018-8514
• CVE-2018-8580
• CVE-2018-8595
• CVE-2018-8596
• CVE-2018-8598
• CVE-2018-8616
• CVE-2018-8621
• CVE-2018-8622
• CVE-2018-8627
• CVE-2018-8637
• CVE-2018-8638

Known Issues

• 4471321
• 4471327
• 4471329
• 4471324
• 4471318

https://portal.msrc.microsoft.com/e...tedetail/6c54acc6-2ed2-e811-a980-000d3a33a34d

:)

 

Microsoft Security Bulletin(s) for November 2018


Release Notes
November 2018 Security Updates
Release Date: November 13, 2018


The November security release consists of security updates for the following software:


Internet Explorer
Microsoft Edge
Microsoft Windows
Microsoft Office and Microsoft Office Services and Web Apps
ChakraCore
.NET Core
Skype for Business
Azure App Service on Azure Stack
Team Foundation Server
Microsoft Dynamics 365 (on-premises) version 8
Please note the following information regarding the security updates:


A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
Starting in March 2017, a delta package will be available on the Microsoft Update Catalog for Windows 10 version 1607 and newer. This delta package contains just the delta changes between the previous month and the current release.
Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates.


ADV180025
CVE-2018-8407
CVE-2018-8408
CVE-2018-8454
CVE-2018-8545
CVE-2018-8558
CVE-2018-8563
CVE-2018-8565
CVE-2018-8573
CVE-2018-8578
CVE-2018-8579
CVE-2018-8581*
CVE-2018-8592*
Known Issues


4467691
4467696
4467686
4467702
4467107
https://portal.msrc.microsoft.com/en...8-000d3a33c573

 

Microsoft Security Bulletin Summary for December 2016

Source: Microsoft Security Bulletin Summary for December 2016

 

Microsoft Security Bulletin(s) for December 2017


Microsoft Security Bulletin(s) for December 2017
Release Notes
December 2017 Security Updates
Release Date: December 12, 2017

The December 7, 2017 security release consists of security updates for the following software:

- Microsoft Malware Protection Engine
The December security release consists of security updates for the following software:
- Internet Explorer
- Microsoft Edge
- Microsoft Windows
- Microsoft Office and Microsoft Office Services and Web Apps
- Microsoft Exchange Server
- ChakraCore
- Microsoft Malware Protection Engine

Please note the following information regarding the security updates:
- Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog

- Starting in March 2017, there will be Windows 10 1607, 1703, and 1709 delta packages that contain just the delta changes between the previous month and the current release.
- Updates for Windows RT8.1 and Microsoft Office RT software are only available via Windows Update.
- In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.

- After May 9, 2017, customers running Windows 10 version 1507 will no longer receive security and quality updates, with the exception of the Windows 10 2015 LTSB and the Windows 10 IoT Enterprise 2015 LTSB editions. Microsoft recommends that customers with devices running other editions of Windows 10 version 1507 that are no longer supported update these devices to the latest version of Windows 10. For more information, see Microsoft Knowledge Base Article 4015562
https://support.microsoft.com/en-gb/...curity-updates

https://portal.msrc.microsoft.com/en...d-000d3a32f9b6




Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so.
If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact: For home users, no-charge support for security updates (only!) is available by calling 800-MICROSOFT (800-642-7676) in the US or 877-568-2495 in Canada.