Windows 10: Microsoft Windows Security Updates December 2018 release overview

Microsoft released security updates for all supported versions of Microsoft Windows and other company products on December 11, 2018.

Our monthly update provides you with detailed information on updates that Microsoft released, known issues, release notes, and links to support pages and downloads.

Check out the overview of last month's update releases here.

Note: We recommend that you create backups of the system before you install updates, especially feature updates.

Microsoft Windows Security Updates December 2018


You can download an Excel spreadsheet that lists all security updates and information about the updates for all supported versions of Windows -- client and server -- and other Microsoft products from our site. Just click on the following link to download the spreadsheet to your device: windows-december-2018-security-updates.zip

Executive Summary

• Windows 10 version 1809 may be distributed to Windows 10 devices when users activate a manual "check for updates".
• Microsoft released security updates for all supported versions of Windows.
• No critical updates for Windows 7 or Windows 8.1.
• Security updates are available for other company products such as Microsoft Office, the .NET Framework, Microsoft Visual Studio, Microsoft Edge, Internet Explorer, and Microsoft Exchange Server.
• The Update Catalog lists 194 updates.

Operating System Distribution

• Windows 7: 9 vulnerabilities of which 9 are rated important.
• Windows 8.1: 8 vulnerabilities of which 8 are rated important.
• Windows 10 version 1607: 12 vulnerabilities of which 2 are critical and 10 are important
• Windows 10 version 1703: 11 vulnerabilities of which 1 is critical and 10 are important
• Windows 10 version 1709: 12 vulnerabilities of which 2 are critical and 10 are important
• Windows 10 version 1803: 12 vulnerabilities of which 2 are critical and 10 are important
• Windows 10 version 1809: 19 vulnerabilities of which 2 are critical and 17 are important

Windows Server products

• Windows Server 2008 R2: 9 vulnerabilities of which 9 are important.
• Windows Server 2012 R2: 9 vulnerabilities of which 1 is critical and 8 are important.
• Windows Server 2016: 11 vulnerabilities of which 2 are critical and 9 are important.
• Windows Server 2019: 13 vulnerabilities of which 2 are critical and 11 are important.

Other Microsoft Products

• Internet Explorer 11: 4 vulnerability, 1 critical, 3 important
• Microsoft Edge: 5 vulnerabilities, 5 critical

Windows Security Updates


Windows 10 version 1809

KB4471332

• Fixed a Seek Bar issue that affected Windows Media Player.
• Security updates to Windows Authentication, Microsoft Scripting Engine, Internet Explorer, Windows App Platform and Frameworks, Microsoft Graphics Component, Windows Storage and Filesystems, Windows Wireless Networking, Windows Kernel, Microsoft Edge, and Microsoft Scripting Engine.

Windows 10 version 1803

KB4471324

• Fixed the Seek Bar issue in Windows Media Player.
• Fixed blue or black screen errors.
• Fixed a Microsoft Intune issue that caused devices to be marked as not compliant because the firewall returned a "poor" status.
• Fixed an issue that caused Start layouts to display incorrectly.
• Security updates to Internet Explorer, Microsoft Scripting Engine, Windows App Platform and Frameworks, Microsoft Graphics Component, Microsoft Edge, Windows Storage and Filesystems, Windows Authentication, Windows Wireless Networking, and Windows Kernel.

Windows 10 version 1709

KB4471329

• Fixed a Seek Bar issue in Windows Media Player.
• Security updates to Internet Explorer, Microsoft Scripting Engine, Windows App Platform and Frameworks, Microsoft Graphics Component, Microsoft Edge, Windows Kernel, Windows Storage and Filesystems, Windows Wireless Networking, and Windows Authentication.

Windows 10 version 1703

KB4471327

• Fixed a Seek Bar issue in Media Player
• Security updates to Microsoft Scripting Engine, Internet Explorer, Windows App Platform and Frameworks, Microsoft Graphics Component, Windows Graphics, Microsoft Edge, Windows Kernel, Windows Storage and Filesystems, Windows Authentication, and Windows Wireless Networking.

Windows 10 version 1607

KB4471321

• Fixed the Seek Bar issue in Windows Media Player.
• Fixed system hangs when using End-user-defined characters (EUDC)
• Security updates to Internet Explorer, Microsoft Scripting Engine, Windows App Platform and Frameworks, Microsoft Graphics Component, Windows Graphics, Microsoft Edge, Windows Kernel, Windows Wireless Networking, and Windows Authentication.

Windows 8.1

KB4471320 -- Monthly Rollup

• Fixed the Seek Bar issue in Windows Media Player
• Security updates to Microsoft Graphics Component, Windows Storage and Filesystems, Windows Wireless Networking, Windows Kernel, and Internet Explorer.

KB4471322 -- Security-only

• Same as KB4471320

Windows 7 Service Pack 1

KB4471318 -- Monthly Rollup

• Fixed issue with Windows Media Player's Seek Bar.
• Security updates to Microsoft Graphics Component, Windows Storage and Filesystems, Windows Wireless Networking, Windows Kernel, and Internet Explorer.

KB4471328 -- Security-only

• See KB4471318

Other security updates

• KB4470199 -- Cumulative Security Update for Internet Explorer
• KB4470490 -- Security Only Update for .NET Framework 4.0 on WES09 and POSReady 2009
• KB4470491 -- Security Only Update for .NET Framework 4.5.2 for Windows 8.1 and Windows Server 2012 R2
• KB4470492 -- Security Only Update for .NET Framework 4.5.2 for Windows Embedded 8 Standard and Windows Server 2012
• KB4470493 -- Security Only Update for .NET Framework 4.5.2 for Windows Embedded Standard 7, Windows 7, Windows Server 2008 R2, and Windows Server 2008
• KB4470498 -- Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard and Windows Server 2012
• KB4470499 --Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1 and Windows Server 2012 R2
• KB4470500 -- Security Only Update for .NET Framework 4.6 for Windows Embedded Standard 7, Windows 7, Windows Server 2008 R2, and Windows Server 2008
• KB4470600 -- Security Only Update for .NET Framework 3.5.1 for Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2
• KB4470601 -- Security Only Update for .NET Framework 3.5 for Windows Embedded 8 Standard and Windows Server 2012
• KB4470602 -- Security Only Update for .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2
• KB4470622 -- Security and Quality Rollup for .NET Framework 4.5.2 for Windows 8.1 and Windows Server 2012 R2
• KB4470623 -- Security and Quality Rollup for .NET Framework 4.5.2 for Windows Embedded 8 Standard and Windows Server 2012
• KB4470629 -- Security and Quality Rollup for .NET Framework 3.5 for Windows Embedded 8 Standard and Windows Server 2012
• KB4470630 -- Security and Quality Rollup for .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2
• KB4470633 -- Security Only Update for .NET Framework 3.5 SP1 for Windows XP Embedded
• KB4470633 -- Security Only Update for .NET Framework 3.5 SP1 for Windows Server 2008
• KB4470637 -- Security and Quality Rollup for .NET Framework 4.5.2 for Windows Embedded Standard 7, Windows 7, Windows Server 2008 R2, and Windows Server 2008
• KB4470638 -- Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard and Windows Server 2012
• KB4470639 -- Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1 and Windows Server 2012 R2
• KB4470640 -- Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded Standard 7, Windows 7, Windows Server 2008 R2, and Windows Server 2008
• KB4470641 -- Security and Quality Rollup for .NET Framework 3.5.1 on Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2
• KB4471102 -- Security and Quality Rollup for .NET Framework 3.5 SP1 for Windows Server 2008
• KB4471318 -- Security Monthly Quality Rollup for Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2
• KB4471319 -- Security Only Quality Update for Windows Server 2008
• KB4471326 -- Security Only Quality Update for Windows Embedded 8 Standard and Windows Server 2012
• KB4471330 -- Security Monthly Quality Rollup for Windows Embedded 8 Standard and Windows Server 2012
• KB4471981 -- Security Only Update for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2
• KB4471982 -- Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard and Windows Server 2012
• KB4471983 -- Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1 and Windows Server 2012 R2
• KB4471984 -- Security Only Update for .NET Framework 3.5 SP1 for Windows Server 2008
• KB4471987 -- Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2
• KB4471988 -- Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard and Windows Server 2012
• KB4471989 -- Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2
• KB4471990 -- Security and Quality Rollup for .NET Framework 3.5 SP1, 4.5.2, 4.6 for Windows Server 2008
• KB4473077 -- Security Update for WES09 and POSReady 2009 for x86-based Systems
• KB4473078 -- Security Update for WES09 and POSReady 2009 for x86-based Systems
• KB4470502 -- Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10, and Windows Server 2019
• KB4471321 -- Cumulative Update for Windows Server 2016 and Windows 10 Version 1607
• KB4471323 -- Cumulative Update for Windows 10 Version 1507

Notes

• CVE-2018-8477
• CVE-2018-8514
• CVE-2018-8580
• CVE-2018-8595
• CVE-2018-8596
• CVE-2018-8598
• CVE-2018-8616
• CVE-2018-8621
• CVE-2018-8622
• CVE-2018-8627
• CVE-2018-8637
• CVE-2018-8638

Known Issues


Windows 10 version 1803

Some users may not be able to pin web links to the Start menu.

Windows 10 version 1607, 1703, 1709 and 1803

After installing the September 11, 2018 Net Framework update, SQLConnection instantiations can throw an exception.

Windows 7 Service Pack 1

Still the Network Interface Controller issue that plagued Windows 7 devices for months.

Security advisories and updates


ADV180029 -- Inadvertently Disclosed Digital Certificates Could Allow Spoofing

ADV180030 -- November 20, 2018 Flash Updates

ADV180031 -- December 2018 Adobe Flash Security Update

ADV990001 -- Latest Servicing Stack Updates (updated)

Non-security related updates


KB4468323 -- Update for WES09 and POSReady 2009

• DST and time zone changes in Windows for Morocco and Volgograd

KB890830 -- Windows Malicious Software Removal Tool - December 2018

Microsoft Office Updates


Microsoft released non-security updates for Office 2010, 2013 and 2016 last week.

A list of all security updates for Microsoft Office is available on KB4477615.

How to download and install the December 2018 security updates




Windows updates are pushed automatically to consumer systems via Windows Update. Admins can run update checks to download the updates quickly; Windows 10 devices may pick up the latest feature update this way, however, which will be downloaded and installed then.

Do the following to run a manual check for updates:

• Tap on the Windows button to display the Start menu.
• Type Windows Update and select the result; this should open the Windows Update control window.
• Select "check for updates" if that is not done automatically.
• Depending on how you configured Windows Update, found updates may be installed automatically or manually.

Direct update downloads


Microsoft publishes all cumulative security updates and other updates on the Microsoft Update Catalog website. Direct download links are listed below.

Windows 7 SP1 and Windows Server 2008 R2 SP

• KB4471318 -- 2018-12 Security Monthly Quality Rollup for Windows 7
• KB4471328 — 2018-12 Security Only Quality Update for Windows 7

Windows 8.1 and Windows Server 2012 R2

• KB4471320 — 2018-12 Security Monthly Quality Rollup for Windows 8.1
• KB4471322 — 2018-12 Security Only Quality Update for Windows 8.1

Windows 10 and Windows Server 2016 (version 1607)

• KB4471321 — 2018-12 Cumulative Update for Windows 10 Version 1607

Windows 10 (version 1703)

• KB4471327 — 2018-12 Cumulative Update for Windows 10 Version 1703

Windows 10 (version 1709)

• KB4471329 — 2018-12 Cumulative Update for Windows 10 Version 1709

Windows 10 (version 1803)

• KB4471324 — 2018-12 Cumulative Update for Windows 10 Version 1803

Windows 10 (version 1809)

• KB4471332 — 2018-12 Cumulative Update for Windows 10 Version 1809

Additional resources

• December 2018 Security Updates release notes
• List of software updates for Microsoft products
• Security Updates Guide
• Microsoft Update Catalog site
• Our in-depth Windows update guide
• How to install optional updates on Windows 10
• Windows 10 Update History
• Windows 8.1 Update History
• Windows 7 Update History

Ghacks needs you. You can find out how to support us here or support the site directly by becoming a Patreon. Thank you for being a Ghacks reader. The post Microsoft Windows Security Updates December 2018 release overview appeared first on gHacks Technology News.

read more...

 

Microsoft Security Bulletin(s) for November 2018


Release Notes
November 2018 Security Updates
Release Date: November 13, 2018


The November security release consists of security updates for the following software:


Internet Explorer
Microsoft Edge
Microsoft Windows
Microsoft Office and Microsoft Office Services and Web Apps
ChakraCore
.NET Core
Skype for Business
Azure App Service on Azure Stack
Team Foundation Server
Microsoft Dynamics 365 (on-premises) version 8
Please note the following information regarding the security updates:


A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
Starting in March 2017, a delta package will be available on the Microsoft Update Catalog for Windows 10 version 1607 and newer. This delta package contains just the delta changes between the previous month and the current release.
Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates.


ADV180025
CVE-2018-8407
CVE-2018-8408
CVE-2018-8454
CVE-2018-8545
CVE-2018-8558
CVE-2018-8563
CVE-2018-8565
CVE-2018-8573
CVE-2018-8578
CVE-2018-8579
CVE-2018-8581*
CVE-2018-8592*
Known Issues


4467691
4467696
4467686
4467702
4467107
https://portal.msrc.microsoft.com/en...8-000d3a33c573

 

Microsoft Security Bulletin(s) for December 2017


Microsoft Security Bulletin(s) for December 2017
Release Notes
December 2017 Security Updates
Release Date: December 12, 2017

The December 7, 2017 security release consists of security updates for the following software:

- Microsoft Malware Protection Engine
The December security release consists of security updates for the following software:
- Internet Explorer
- Microsoft Edge
- Microsoft Windows
- Microsoft Office and Microsoft Office Services and Web Apps
- Microsoft Exchange Server
- ChakraCore
- Microsoft Malware Protection Engine

Please note the following information regarding the security updates:
- Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog

- Starting in March 2017, there will be Windows 10 1607, 1703, and 1709 delta packages that contain just the delta changes between the previous month and the current release.
- Updates for Windows RT8.1 and Microsoft Office RT software are only available via Windows Update.
- In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.

- After May 9, 2017, customers running Windows 10 version 1507 will no longer receive security and quality updates, with the exception of the Windows 10 2015 LTSB and the Windows 10 IoT Enterprise 2015 LTSB editions. Microsoft recommends that customers with devices running other editions of Windows 10 version 1507 that are no longer supported update these devices to the latest version of Windows 10. For more information, see Microsoft Knowledge Base Article 4015562
https://support.microsoft.com/en-gb/...curity-updates

https://portal.msrc.microsoft.com/en...d-000d3a32f9b6




Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so.
If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact: For home users, no-charge support for security updates (only!) is available by calling 800-MICROSOFT (800-642-7676) in the US or 877-568-2495 in Canada.

 

Microsoft Security Bulletin for September 2007

Microsoft released yesterday the September Security Bulletin for Windows operating system, as part of its monthly security cycle. This bulletin summary lists one critical and three important updates. For more information, see Microsoft Security Bulletin Summary for September 2007.

Source: Microsoft