Microsoft September 2019 Security Updates

Release Notes



September 2019 Security Updates

Release Date: September 10, 2019
The September security release consists of security updates for the following software:

• Microsoft Windows
• Internet Explorer
• Microsoft Edge (EdgeHTML-based)
• ChakraCore
• Microsoft Office and Microsoft Office Services and Web Apps
• Adobe Flash Player
• Microsoft Lync
• Visual Studio
• Microsoft Exchange Server
• .NET Framework
• Microsoft Yammer
• .NET Core
• ASP.NET
• Team Foundation Server
• Project Rome

Please note the following information regarding the security updates:

• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
• Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
• For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Starting in May 2019, Internet Explorer 11 is available on Windows Server 2012. This configuration is present only in the IE Cumulative package.

The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates. Please note that this is not a complete list of CVEs for this release.

• ADV190022
• ADV990001
• CVE-2019-1142 *
• CVE-2019-1209
• CVE-2019-1216
• CVE-2019-1219
• CVE-2019-1231
• CVE-2019-1240
• CVE-2019-1241
• CVE-2019-1242
• CVE-2019-1243
• CVE-2019-1244
• CVE-2019-1245
• CVE-2019-1246
• CVE-2019-1247
• CVE-2019-1248
• CVE-2019-1249
• CVE-2019-1250
• CVE-2019-1251
• CVE-2019-1252
• CVE-2019-1254
• CVE-2019-1257
• CVE-2019-1259
• CVE-2019-1260
• CVE-2019-1261
• CVE-2019-1262
• CVE-2019-1263
• CVE-2019-1264
• CVE-2019-1265 *
• CVE-2019-1274
• CVE-2019-1282
• CVE-2019-1283
• CVE-2019-1286
• CVE-2019-1293
• CVE-2019-1295
• CVE-2019-1296
• CVE-2019-1297
• CVE-2019-1299

Known Issues

KB Article	Applies To
4512578	Windows 10, version 1809, Windows Server 2019
4513696	Visual Studio 2015
4515384	Windows 10, version 1903, Windows Server version 1903
4515832	Microsoft Exchange Server 2019 and Exchange Server 2016
4516044	Windows 10, version 1607, Windows Server 2016
4516046	Internet Explorer
4516055	Windows Server 2012 (Monthly Rollup)
4516058	Windows 10, version 1803, Windows Server version 1803
4516062	Windows Server 2012 (Security-only update)
4516064	Windows 8.1, Windows Server 2012 R2 (Security-only update)
4516065	Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Monthly Rollup)
4516066	Windows 10, version 1709
4516067	Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)
4516068	Windows 10, version 1703
4516070	Windows 10

https://portal.msrc.microsoft.com/en...4-000d3a33c573

Brink usually provides a thorough post in the news section.