Windows 10: Microsoft December 2019 Security Updates

Release Notes
December 2019 Security Updates

Release Date: December 10, 2019



The December security release consists of security updates for the following software:

• Microsoft Windows
• Internet Explorer
• Microsoft Office and Microsoft Office Services and Web Apps
• SQL Server
• Visual Studio
• Skype for Business

Please note the following information regarding the security updates:

• For information regarding enabling Windows 10, version 1909 features, please see Windows 10, version 1909 delivery options. Note that Windows 10, versions 1903 and 1909 share a common core operating system with an identical set of system files. They will also share the same security update KBs.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
• For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• Starting in May 2019, Internet Explorer 11 is available on Windows Server 2012. This configuration is present only in the IE Cumulative package.
• Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.

The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates. Please note that this is not a complete list of CVEs for this release.

• ADV990001
• ADV190026 *
• CVE-2019-1349 *
• CVE-2019-1350 *
• CVE-2019-1351 *
• CVE-2019-1352 *
• CVE-2019-1354 *
• CVE-2019-1355 *
• CVE-2019-1387 *
• CVE-2019-1400
• CVE-2019-1461
• CVE-2019-1462
• CVE-2019-1463
• CVE-2019-1464
• CVE-2019-1465
• CVE-2019-1466
• CVE-2019-1467
• CVE-2019-1469
• CVE-2019-1470
• CVE-2019-1472
• CVE-2019-1474
• CVE-2019-1480
• CVE-2019-1481
• CVE-2019-1486 *
• CVE-2019-1487
• CVE-2019-1489

Known Issues

The following KBs contain information about known issues with the security updates. For more information about Windows Known Issues, please see Windows message center. Links to currently-supported versions of Windows 10 are in the left pane.

For a complete list of security update KBs, please see 20191210.

4484190 Excel 2013
4484179 Excel 2016
4461590 PowerPoint 2013
4484190 PowerPoint 2016
4484190 Word 2013
4484190 Word 2016
4530681 Windows 10
4530684 Windows 10, version 1803, Windows Server version 1803, Windows 10, version 1809, Windows Server version 1809
4530689 Windows 10, version 1607, Windows Server 2016
4530691 Windows Server 2012 (Monthly Rollup)
4530698 Windows Server 2012 (Security-only update)
4530702 Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)
4530714 Windows 10, version 1709
4530715 Windows 10, version 1809, Windows Server 2019
4530717 Windows 10, version 1803, Windows Server version 1803
4530730 Windows 8.1, Windows Server 2012 R2 (Security-only update)
4530734 Windows 7 SP1, Windows Server 2008 R2 SP1 (Monthly Rollup)

https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2019-Dec


:)

 

Microsoft February 2019 Security Updates

Release Notes

February 2019 Security Updates

Release Date: February 12, 2019

The February security release consists of security updates for the following software:

Adobe Flash Player

Internet Explorer

Microsoft Edge

Microsoft Windows

Microsoft Office and Microsoft Office Services and Web Apps

ChakraCore

.NET Framework

Microsoft Exchange Server

Microsoft Visual Studio

Azure IoT SDK

Microsoft Dynamics

Team Foundation Server

Visual Studio Code

Please note the following information regarding the security updates:

A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.

Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.

Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.

For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.

In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.

The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates.

ADV190003

ADV190007 *

ADV990001

CVE-2019-0540 *

CVE-2019-0600

CVE-2019-0601

CVE-2019-0602

CVE-2019-0615

CVE-2019-0616

CVE-2019-0619

CVE-2019-0621

CVE-2019-0628

CVE-2019-0635

CVE-2019-0636

CVE-2019-0643

CVE-2019-0648

CVE-2019-0658

CVE-2019-0660

CVE-2019-0661

CVE-2019-0664

CVE-2019-0669

CVE-2019-0676

CVE-2019-0686 *

CVE-2019-0724 *

CVE-2019-0741

Known Issues

44****2

{{windowTitle}}

 

Microsoft January 2019 Security Updates

Release Notes
January 2019 Security Updates

Release Date: January 08, 2019

The January security release consists of security updates for the following software:

• Adobe Flash Player
• Internet Explorer
• Microsoft Edge
• Microsoft Windows
• Microsoft Office and Microsoft Office Services and Web Apps
• ChakraCore
• .NET Framework
• ASP.NET
• Microsoft Exchange Server
• Microsoft Visual Studio

Please note the following information regarding the security updates:

• A list of the latest servicing stack updates for each operating system can be found in
  
  ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the
  
  Microsoft Update Catalog.
• Updates for Windows RT 8.1 and Microsoft Office RT software are only available via
  
  Windows Update.
• For information on lifecycle and support dates for Windows 10 operating systems, please see
  
  Windows Lifecycle Facts Sheet.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.

The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates.

• ADV190001
• CVE-2019-0536
• CVE-2019-0537
• CVE-2019-0545
• CVE-2019-0549
• CVE-2019-0553
• CVE-2019-0554
• CVE-2019-0559
• CVE-2019-0560
• CVE-2019-0561
• CVE-2019-0569
• CVE-2019-0585
• CVE-2019-0588

Known Issues

• 4480961
• 4480973
• 4480978
• 4480966
• 4480970
• 4480116
• 4480962
• 4480963
• 4480975
• 4468742
• 4471389

{{windowTitle}}

 

microsoft June 2019 Security Updates

Release Notes

June 2019 Security Updates

Release Date: June 11, 2019

The June security release consists of security updates for the following software:

Adobe Flash Player

Microsoft Windows

Internet Explorer

Microsoft Edge

Microsoft Office and Microsoft Office Services and Web Apps

ChakraCore

Skype for Business and Microsoft Lync

Microsoft Exchange Server

Azure

Please note the following information regarding the security updates:

A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.

Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.

Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.

For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.

In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.

The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates. Please note that this is not a complete list of CVEs for this release.

ADV190015

ADV990001

CVE-2019-0904

CVE-2019-0905

CVE-2019-0906

CVE-2019-0907

CVE-2019-0908

CVE-2019-0909

CVE-2019-0948

CVE-2019-0968

CVE-2019-0974

CVE-2019-0977

CVE-2019-0990

CVE-2019-1009

CVE-2019-1010

CVE-2019-1011

CVE-2019-1012

CVE-2019-1013

CVE-2019-1015

CVE-2019-1016

CVE-2019-1023

CVE-2019-1031

CVE-2019-1032

CVE-2019-1033

CVE-2019-1034

CVE-2019-1035

CVE-2019-1036

CVE-2019-1039

CVE-2019-1046

CVE-2019-1047

CVE-2019-1048

CVE-2019-1049

CVE-2019-1050

CVE-2019-1081

Known Issues

KB Article Applies To

4493730 Windows Server 2008 Service Pack 2 Servicing stack update

4503027 Exchange Server 2019, Exchange Server 2016

4503028 Exchange Server 2010 Service Pack 3, Exchange Server 2013

4503263 Windows Server 2012 (Security-only update)

4503267 Windows 10, version 1607, Windows Server 2016

4503276 Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)

4503279 Windows 10, version 1703

4503284 Windows 10, version 1709

4503285 Windows Server 2012 (Monthly Rollup)

4503286 Windows 10, version 1803

4503290 Windows 8.1 Windows Server 2012 R2 (Security-only update)

4503291 Windows 10

4503292 Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Security-only update)

4503293 Windows 10, version 1903

4503327 Windows 10, version 1809, Windows Server 2019

{{windowTitle}}