Microsoft Windows Security Updates December 2018 release overview

Microsoft released security updates for all supported versions of Microsoft Windows and other company products on December 11, 2018.

Our monthly update provides you with detailed information on updates that Microsoft released, known issues, release notes, and links to support pages and downloads.

Check out the overview of last month's update releases here.

Note: We recommend that you create backups of the system before you install updates, especially feature updates.

Microsoft Windows Security Updates December 2018

You can download an Excel spreadsheet that lists all security updates and information about the updates for all supported versions of Windows -- client and server -- and other Microsoft products from our site. Just click on the following link to download the spreadsheet to your device: windows-december-2018-security-updates.zip

Executive Summary

• Windows 10 version 1809 may be distributed to Windows 10 devices when users activate a manual "check for updates".
• Microsoft released security updates for all supported versions of Windows.
• No critical updates for Windows 7 or Windows 8.1.
• Security updates are available for other company products such as Microsoft Office, the .NET Framework, Microsoft Visual Studio, Microsoft Edge, Internet Explorer, and Microsoft Exchange Server.
• The Update Catalog lists 194 updates.

Operating System Distribution

• Windows 7: 9 vulnerabilities of which 9 are rated important.
• Windows 8.1: 8 vulnerabilities of which 8 are rated important.
• Windows 10 version 1607:  12 vulnerabilities of which 2 are critical and 10 are important
• Windows 10 version 1703:  11 vulnerabilities of which 1 is critical and 10 are important
• Windows 10 version 1709: 12 vulnerabilities of which 2 are critical and 10 are important
• Windows 10 version 1803: 12 vulnerabilities of which 2 are critical and 10 are important
• Windows 10 version 1809: 19 vulnerabilities of which 2 are critical and 17 are important

Windows Server products

• Windows Server 2008 R2: 9 vulnerabilities of which 9 are important.
• Windows Server 2012 R2: 9 vulnerabilities of which 1 is critical and 8 are important.
• Windows Server 2016: 11 vulnerabilities of which 2 are critical and 9 are important.
• Windows Server 2019: 13 vulnerabilities of which 2 are critical and 11 are important.

Other Microsoft Products

• Internet Explorer 11: 4 vulnerability, 1 critical, 3 important
• Microsoft Edge: 5 vulnerabilities, 5 critical

Windows Security Updates

Windows 10 version 1809

KB4471332

• Fixed a Seek Bar issue that affected Windows Media Player.
• Security updates to Windows Authentication, Microsoft Scripting Engine, Internet Explorer, Windows App Platform and Frameworks, Microsoft Graphics Component, Windows Storage and Filesystems, Windows Wireless Networking, Windows Kernel, Microsoft Edge, and Microsoft Scripting Engine.

Windows 10 version 1803

KB4471324

• Fixed the Seek Bar issue in Windows Media Player.
• Fixed blue or black screen errors.
• Fixed a Microsoft Intune issue that caused devices to be marked as not compliant because the firewall returned a "poor" status.
• Fixed an issue that caused Start layouts to display incorrectly.
• Security updates to Internet Explorer, Microsoft Scripting Engine, Windows App Platform and Frameworks, Microsoft Graphics Component, Microsoft Edge, Windows Storage and Filesystems, Windows Authentication, Windows Wireless Networking, and Windows Kernel.

Windows 10 version 1709

KB4471329

• Fixed a Seek Bar issue in Windows Media Player.
• Security updates to Internet Explorer, Microsoft Scripting Engine, Windows App Platform and Frameworks, Microsoft Graphics Component, Microsoft Edge, Windows Kernel, Windows Storage and Filesystems, Windows Wireless Networking, and Windows Authentication.

Windows 10 version 1703

KB4471327

• Fixed a Seek Bar issue in Media Player
• Security updates to Microsoft Scripting Engine, Internet Explorer, Windows App Platform and Frameworks, Microsoft Graphics Component, Windows Graphics, Microsoft Edge, Windows Kernel, Windows Storage and Filesystems, Windows Authentication, and Windows Wireless Networking.

Windows 10 version 1607

KB4471321

• Fixed the Seek Bar issue in Windows Media Player.
• Fixed system hangs when using End-user-defined characters (EUDC)
• Security updates to Internet Explorer, Microsoft Scripting Engine, Windows App Platform and Frameworks, Microsoft Graphics Component, Windows Graphics, Microsoft Edge, Windows Kernel, Windows Wireless Networking, and Windows Authentication.

Windows 8.1

KB4471320 -- Monthly Rollup

• Fixed the Seek Bar issue in Windows Media Player
• Security updates to Microsoft Graphics Component, Windows Storage and Filesystems, Windows Wireless Networking, Windows Kernel, and Internet Explorer.

KB4471322 -- Security-only

• Same as KB4471320

Windows 7 Service Pack 1

KB4471318 -- Monthly Rollup

• Fixed issue with Windows Media Player's Seek Bar.
• Security updates to Microsoft Graphics Component, Windows Storage and Filesystems, Windows Wireless Networking, Windows Kernel, and Internet Explorer.

KB4471328 -- Security-only

• See KB4471318

Other security updates

• KB4470199 -- Cumulative Security Update for Internet Explorer
• KB4470490 -- Security Only Update for .NET Framework 4.0 on WES09 and POSReady 2009
• KB4470491 -- Security Only Update for .NET Framework 4.5.2 for Windows 8.1 and Windows Server 2012 R2
• KB4470492 -- Security Only Update for .NET Framework 4.5.2 for Windows Embedded 8 Standard and Windows Server 2012
• KB4470493 -- Security Only Update for .NET Framework 4.5.2 for Windows Embedded Standard 7, Windows 7, Windows Server 2008 R2, and Windows Server 2008
• KB4470498 -- Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard and Windows Server 2012
• KB4470499 --Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1 and Windows Server 2012 R2
• KB4470500 -- Security Only Update for .NET Framework 4.6 for Windows Embedded Standard 7, Windows 7, Windows Server 2008 R2, and Windows Server 2008
• KB4470600 -- Security Only Update for .NET Framework 3.5.1 for Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2
• KB4470601 -- Security Only Update for .NET Framework 3.5 for Windows Embedded 8 Standard and Windows Server 2012
• KB4470602 -- Security Only Update for .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2
• KB4470622 -- Security and Quality Rollup for .NET Framework 4.5.2 for Windows 8.1 and Windows Server 2012 R2
• KB4470623 -- Security and Quality Rollup for .NET Framework 4.5.2 for Windows Embedded 8 Standard and Windows Server 2012
• KB4470629 -- Security and Quality Rollup for .NET Framework 3.5 for Windows Embedded 8 Standard and Windows Server 2012
• KB4470630 -- Security and Quality Rollup for .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2
• KB4470633 -- Security Only Update for .NET Framework 3.5 SP1 for Windows XP Embedded
• KB4470633 -- Security Only Update for .NET Framework 3.5 SP1 for Windows Server 2008
• KB4470637 -- Security and Quality Rollup for .NET Framework 4.5.2 for Windows Embedded Standard 7, Windows 7, Windows Server 2008 R2, and Windows Server 2008
• KB4470638 -- Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard and Windows Server 2012
• KB4470639 -- Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1 and Windows Server 2012 R2
• KB4470640 -- Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded Standard 7, Windows 7, Windows Server 2008 R2, and Windows Server 2008
• KB4470641 -- Security and Quality Rollup for .NET Framework 3.5.1 on Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2
• KB4471102 -- Security and Quality Rollup for .NET Framework 3.5 SP1 for Windows Server 2008
• KB4471318 -- Security Monthly Quality Rollup for Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2
• KB4471319 -- Security Only Quality Update for Windows Server 2008
• KB4471326 -- Security Only Quality Update for Windows Embedded 8 Standard and Windows Server 2012
• KB4471330 -- Security Monthly Quality Rollup for Windows Embedded 8 Standard and Windows Server 2012
• KB4471981 -- Security Only Update for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2
• KB4471982 -- Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard and Windows Server 2012
• KB4471983 -- Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1 and Windows Server 2012 R2
• KB4471984 -- Security Only Update for .NET Framework 3.5 SP1 for Windows Server 2008
• KB4471987 -- Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2
• KB4471988 -- Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard and Windows Server 2012
• KB4471989 -- Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2
• KB4471990 -- Security and Quality Rollup for .NET Framework 3.5 SP1, 4.5.2, 4.6 for Windows Server 2008
• KB4473077 -- Security Update for WES09 and POSReady 2009 for x86-based Systems
• KB4473078 -- Security Update for WES09 and POSReady 2009 for x86-based Systems
• KB4470502 -- Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10, and Windows Server 2019
• KB4471321 -- Cumulative Update for Windows Server 2016 and Windows 10 Version 1607
• KB4471323 -- Cumulative Update for Windows 10 Version 1507

Notes

• CVE-2018-8477
• CVE-2018-8514
• CVE-2018-8580
• CVE-2018-8595
• CVE-2018-8596
• CVE-2018-8598
• CVE-2018-8616
• CVE-2018-8621
• CVE-2018-8622
• CVE-2018-8627
• CVE-2018-8637
• CVE-2018-8638

Known Issues

Windows 10 version 1803

Some users may not be able to pin web links to the Start menu.

Windows 10 version 1607, 1703, 1709 and 1803

After installing the September 11, 2018 Net Framework update, SQLConnection instantiations can throw an exception.

Windows 7 Service Pack 1

Still the Network Interface Controller issue that plagued Windows 7 devices for months.

Security advisories and updates

ADV180029 -- Inadvertently Disclosed Digital Certificates Could Allow Spoofing

ADV180030 -- November 20, 2018 Flash Updates

ADV180031 -- December 2018 Adobe Flash Security Update

ADV990001 -- Latest Servicing Stack Updates (updated)

Non-security related updates

KB4468323 -- Update for WES09 and POSReady 2009

• DST and time zone changes in Windows for Morocco and Volgograd

KB890830 -- Windows Malicious Software Removal Tool - December 2018

Microsoft Office Updates

Microsoft released non-security updates for Office 2010, 2013 and 2016 last week.

A list of all security updates for Microsoft Office is available on KB4477615.

How to download and install the December 2018 security updates

Windows updates are pushed automatically to consumer systems via Windows Update. Admins can run update checks to download the updates quickly; Windows 10 devices may pick up the latest feature update this way, however, which will be downloaded and installed then.

Do the following to run a manual check for updates:

• Tap on the Windows button to display the Start menu.
• Type Windows Update and select the result; this should open the Windows Update control window.
• Select "check for updates" if that is not done automatically.
• Depending on how you configured Windows Update, found updates may be installed automatically or manually.

Direct update downloads

Microsoft publishes all cumulative security updates and other updates on the Microsoft Update Catalog website. Direct download links are listed below.

Windows 7 SP1 and Windows Server 2008 R2 SP

• KB4471318 -- 2018-12 Security Monthly Quality Rollup for Windows 7
• KB4471328 - 2018-12 Security Only Quality Update for Windows 7

Windows 8.1 and Windows Server 2012 R2

• KB4471320 - 2018-12 Security Monthly Quality Rollup for Windows 8.1
• KB4471322 - 2018-12 Security Only Quality Update for Windows 8.1

Windows 10 and Windows Server 2016 (version 1607)

•  KB4471321 - 2018-12 Cumulative Update for Windows 10 Version 1607

Windows 10 (version 1703)

•  KB4471327 - 2018-12 Cumulative Update for Windows 10 Version 1703

Windows 10 (version 1709)

• KB4471329  - 2018-12 Cumulative Update for Windows 10 Version 1709

Windows 10 (version 1803)

• KB4471324  - 2018-12 Cumulative Update for Windows 10 Version 1803

Windows 10 (version 1809)

•  KB4471332 - 2018-12 Cumulative Update for Windows 10 Version 1809

Additional resources