Microsoft Windows Security Updates July 2019 Release Overview

Tips and Tricks

14 Jan, 2019

It is July 10, 2018 today knowning that means it's the time for our monthly Microsoft Patch Day overview. Microsoft releases security updates for company products about the second Tuesday of the month.

Our coverage includes valuable information about today's releases. It gets underway with an executive summary that lists the most crucial information without delay. We look in the operating system distribution of patches for all those supported client and server versions of Windows, and list all released updates afterward.

Links are supplied to Microsoft Support pages to find out additional information and download the updates.

Our overview includes security advisories and known issues, direct downloads of security patches, and links to resources.

Check out last month's overview here.

Microsoft Windows Security Updates July 2018

The following Excel spreadsheet contains all security updates that Microsoft released today for everyone of its products. Click about the following link to download it: July 2018 Windows Security Updates

Executive Summary

Microsoft released security updates for all those client and server versions of Windows.

No critical vulnerabilities for many client and server versions of Windows.

Critical vulnerabilities in Edge and Internet Explorer.

Other Microsoft products with security updates are: Microsoft Office, .NET Framework, ASP.NET, Visual Studio, Skype for Business and Microsoft Lync, and Internet Explorer / Microsoft Edge

Operating System Distribution

Windows 7: 7 vulnerabilities which often 7 are very important.

Windows 8.1: 9 vulnerabilities which 9 are necessary.

Windows 10 version 1607: 8 vulnerabilities that 8 are essential.

Windows 10 version 1703: 8 vulnerabilities which 8 are essential.

Windows 10 version 1709: 8 vulnerabilities which often 8 are very important.

Windows 10 version 1803: 7 vulnerabilities that 7 are very important.

Windows Server products

Windows Server 2008 R2: 8 vulnerabilities that 8 are necessary.

Windows Server 2012 and 2012 R2: 9 vulnerabilities ones 9 are very important.

Windows Server 2016: 8 vulnerabilities which 8 are necessary.

Other Microsoft Products

Internet Explorer 11: 6 vulnerabilities, 4 critical, 2 important

Microsoft Edge: 19 vulnerabilities, 12 critical, 7 important

Windows Security Updates

KB4338823 -- Windows 7 SP1 Security-only update

Protection against Lazy Floating Point (FP) State Restore (CVE-2018-3665) for 64-Bit (x64) versions of Windows.

Security updates to Internet Explorer, Windows apps, Windows graphics, Windows Shell, Windows datacenter networking, Windows wireless networking, and Windows virtualization.

KB4338818 -- Windows 7 SP1 Monthly rollup

Same as KB4338823.

Internet Explorer update to adapt to the policy that disabled the launch of Developer Tools.

Fixed DNS requests disregarding proxy configurations in IE and Edge (copy and paste gone wrong, Edge hard to get at for Windows 7).

KB4338824 -- Windows 8.1 Security-only update

Protection against Lazy Floating Point (FP) State Restore (CVE-2018-3665) for 64-Bit (x64) versions of Windows.

Provides protections from a different subclass of speculative execution side-channel vulnerability generally known as Speculative Store Bypass (CVE-2018-3639). (see here (client) and here (server)

Provides support to manage usage of Indirect Branch Prediction Barrier (IBPB) on some AMD processors (CPUs) for mitigating CVE-2017-5715 (see here and here)

Security updates to Internet Explorer, Windows apps, Windows graphics, Windows Shell, Windows datacenter networking, Windows virtualization, and Windows kernel.

KB4338815 -- Windows 8.1 Monthly Rollup

Same as KB4338824

Internet Explorer update to evolve to the policy that disabled the launch of Developer Tools.

Fixed DNS requests disregarding proxy configurations in IE and Edge (copy and paste gone wrong, Edge inaccessible for Windows 8.1).

Fixed mouse eliminate after switching between local and remote sessions.

KB4338814 -- Windows 10 version 1607

Updates support for your draft version from the Token Binding protocol v0.16.

Fixed form submission issue in IE.

Updates Internet Explorer's Inspect Element feature to adapt to the policy that disables the launch of Developer Tools.

Fixed wrong IME mode chosen by using an IME-active element.

Fixed DNS requests issue where requests disregarded proxy configurations in IE and Edge.

Evaluates the Windows ecosystem to assist ensure application and device compatibility for all those updates to Windows (what do i mean?)

Security updates to Internet Explorer, Microsoft Edge, Windows apps, Windows graphics, Windows datacenter networking, Windows virtualization, Windows kernel, and Windows Server.

KB4338826 -- Windows 10 version 1703

Fixed form submission issue in IE.

Updates Internet Explorer's Inspect Element feature to evolve to the policy that disables the launch of Developer Tools.

Fixed wrong IME mode chosen upon an IME-active element.

Fixed DNS requests issue where requests disregarded proxy configurations in IE and Edge.

Fixed difficulties with updated time zone information.

Evaluates the Windows ecosystem that can help ensure application and device compatibility for those updates to Windows (what am i saying?)

Security updates to Internet Explorer, Microsoft Edge, Windows apps, Windows graphics, Windows virtualization, Windows kernel, and Windows Server.

KB4338825 -- Windows 10 version 1709

Fixed wrong IME mode chosen.

Fixed form submission issue in Internet Explorer.

Fixed DNS requests disregarding proxy configurations in IE and Edge.

Addressed updated time zone information issues.

Fixed a Google Chrome damaged issue on Cobalt devices.

Evaluates the Windows ecosystem to assist ensure application and device compatibility for all those updates to Windows (what do i mean?)

Security updates to Internet Explorer, Microsoft Edge, Microsoft scripting engine, Windows apps, Windows graphics, Windows datacenter networking, Windows virtualization, Windows kernel, and Windows Server.

KB4338819 - Windows 10 version 1803

Microsoft Edge DevTools Preview app allows debugging of WebView content in UWP apps.

Improved Universal CRT Ctype category of functions by correctly handling EOF as valid input.

Addresses an issue that could potentially cause the Mitigation Options Group Policy client-side extension to fail during GPO processing. Error message is "Windows did not apply the MitigationOptions settings. MitigationOptions settings probably have its own log file" or "ProcessGPOList: Extension MitigationOptions returned 0xea".

Evaluates the Windows ecosystem to help you ensure application and device compatibility for many updates to Windows (what am i saying?)

Security updates to Internet Explorer, Windows apps, Windows graphics, Windows datacenter networking, Windows wireless networking, Windows virtualization, Windows kernel, and Windows Server.

KB4134651 -- Security Update for WES09 and POSReady 2009 for x86-based Systems

An elevation of privilege vulnerability exists in the event the Windows kernel isn't able to properly handle objects in memory.

A remote code execution vulnerability exists in the manner that the VBScript engine handles objects in memory.

KB4291391 -- Security Update for Windows Server 2008 and Windows XP Embedded

- A denial of service vulnerability exists from the Windows Domain Name System (DNS) DNSAPI.dll when it ceases to properly handle DNS responses.

KB4293756 -- Security Update for Windows Server 2008

- A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections.

KB4295656 -- Security Update for Windows Server 2008

- An elevation of privilege vulnerability exists once the Windows kernel doesn't properly handle objects in memory.

KB4338597 -- Security Only Update for .NET Framework 3.0 on WES09 and POSReady 2009

KB4338598 -- Security Only Update for .NET Framework 4 for WES09 and POSReady 2009

KB4338615 -- Security Only Update for .NET Framework 2.0 on WES09 and POSReady 2009

KB4338820 -- Security Only Quality Update for Windows Embedded 8 Standard and Windows Server 2012

KB4338830 -- Security Monthly Quality Rollup for Windows Embedded 8 Standard and Windows Server 2012

KB4338832 -- Adobe Flash Player update

KB4339093 -- Cumulative Security Update for Internet Explorer

KB4339291 -- Security Update for WES09 and POSReady 2009

- A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects.

KB4339503 -- Security Update for Windows Server 2008

- An elevation of privilege vulnerability exists when Windows fails a cheque, allowing a sandbox escape.

KB4339854 -- Security Update for WES09 and POSReady 2009

- An elevation of privilege vulnerability exists in Windows in the event the Windows kernel-mode driver isn't able to properly handle objects in memory.

KB4340004 -- Security Only Update for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2

KB4340005 -- Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard and Windows Server 2012

KB4340006 -- Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1 and Windows Server 2012 R2

KB4340007 -- Security Only Update for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008

KB4340556 -- Security and Quality Rollup for .NET Framework 3.5.1 on Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2

KB4340557 -- Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard and Windows Server 2012

KB4340558 -- Security and Quality Rollup for .NET Framework 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2

KB4340559 -- Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 on Windows Server 2008

KB4340583 -- Security Update for Windows Server 2008

- A denial of service vulnerability exists when Windows improperly handles objects in memory.

Notes

The release notes list CVEs with FAQs that offer further information:

CVE-2018-8260

CVE-2018-8281

CVE-2018-8282

CVE-2018-8282

CVE-2018-8299

CVE-2018-8300

CVE-2018-8310

CVE-2018-8323

CVE-2018-8327

CVE-2018-8326

Known Issues

Windows 7 SP1

There is a concern with Windows and third-party software linked to a missing file (oem.inf). Because of this issue, when you finally apply this update, the network interface controller will eradicate working.

Workaround:

Launch devmgmt.msc, device can take place under Other Devices.

Select Scan for hardware changes in the Action menu.

Alternatively: Right-click about the device and select update. Activate search automatically for updated driver software, or browse my computer for driver software.

Windows 10 version 1709

Localization issues for select strings. The strings could be displayed in English rather then then localized language.

Update: new issue affects also Windows 10 version 1607

After installing this update with a DHCP Failover Server, Enterprise clients may get an invalid configuration when requesting a whole new IP address. This may end in loss of connectivity as systems do not renew their leases.

Microsoft expects to get a working solution available mid-July.

KB4340558

Users get a "0x80092004" error if they try to setup the July 2018 Security and Quality Rollup update KB4340557 or KB4340558 on Windows 8.1, Windows Server 2012 R2, or Windows Server 2012 whenever they install the June 2018 .NET Framework Preview of Quality Rollup updates KB4291497 or KB4291495 on systems which might be running on .NET Framework 4.7.2, 4.7.1, 4.7, 4.62, 4.6.1, or 4.6.

Security advisories and updates

ADV180002 | Guidance to mitigate speculative execution side-channel vulnerabilities (update)

ADV180012 | Microsoft Guidance for Speculative Store Bypass (update)

ADV180015 | Microsoft Office Defense in Depth Update

ADV180016 | Microsoft Guidance for Lazy FP State Restore

ADV170017 | Microsoft Office Defense in Depth Update (updated)

Non-security related updates

KB2952664 -- Update for Windows 7

- Compatibility update for keeping Windows up-to-date in Windows 7

KB2976978 -- Update for Windows 8.1

- Compatibility update for keeping Windows up-to-date in Windows 8.1 and Windows 8

KB4054529 -- Microsoft .NET Framework 4.7.2 Language Packs for Windows 7 and Windows Server 2008 R2

KB4054530 -- Microsoft .NET Framework 4.7.2 for Windows 7 and Windows Server 2008 R2

KB4054533 -- Microsoft .NET Framework 4.7.2 Language Packs for Windows Embedded 8 Standard and Windows Server 2012

KB4054534 -- Microsoft .NET Framework 4.7.2 Language Packs for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2

KB4054535 -- Microsoft .NET Framework 4.7.2 Language Packs for Windows Server 2016, Windows 10 Version 1709, Windows 10 Version 1703, Windows 10 Version 1607, Windows 10 Version 1511, Windows 10 Version 1507, and Windows 10

KB4054542 -- Microsoft .NET Framework 4.7.2 for Windows Embedded 8 Standard and Windows Server 2012

KB4054566 -- Microsoft .NET Framework 4.7.2 for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2

KB4054590 -- Microsoft .NET Framework 4.7.2 for Windows Server 2016, Windows 10 Version 1709, Windows 10 Version 1703, Windows 10 Version 1607, Windows 10 Version 1511, Windows 10 Version 1507, and Windows 10

KB4073120 -- Microsoft .NET Framework 4.7.2 for Windows Server 2016, Windows 10 Version 1709, Windows 10 Version 1703, Windows 10 Version 1607, Windows 10 Version 1511, Windows 10 Version 1507, and Windows 10

KB4073705 -- Microsoft .NET Framework 4.7.2 Language Packs for Windows Server 2016, Windows 10 Version 1709, Windows 10 Version 1703, Windows 10 Version 1607, Windows 10 Version 1511, Windows 10 Version 1507, and Windows 10

KB4338852 -- Dynamic Update for Windows 10 Version 1709

- This update makes improvements to alleviate the upgrade experience to Windows 10, Version 1709.

KB4339277 -- Dynamic Update for Windows 10 Version 1803

- This update makes improvements to relieve the upgrade experience to Windows 10, version 1803.

KB4339420 -- Update for Windows 10 Version 1709

- Servicing stack update for Windows 10, version 1709: July 10, 2018

KB890830 -- Windows Malicious Software Removal Tool - July 2018

Microsoft Office Updates

Microsoft released non-security updates for Office a week ago. Check out the article if you happen to missed it. You find security releases that Microsoft published today below:

Office 2016

KB4022172 -- Patches an isolated code execution vulnerability in Microsoft Office.

KB4022176 -- Same as KB4022172.

KB4018338 -- Security update for Access that resolves vulnerabilities that might allow remote code execution attacks.

KB4022221 -- Skype for Business 2016 update. Fixes remote code execution vulnerabilities.

KB4022218 -- Word 2016 update that patches remote code execution vulnerabilities.

Office 2013

KB4022188 -- Same as KB4022172.

KB4022189 -- Same as KB4022172.

KB4018351 -- Same as KB4018338

KB4022225 -- Skype for Business 2015 update that fixes remote code execution vulnerabilities.

KB4022224 -- Same as KB4022218 (except for Word 2013)

Office 2010

KB4022200 -- Fixes issues that might lead to remote code execution.

KB4022208 -- Same as KB4022172.

KB4022206 -- Same as KB4022172.

KB4022202 -- Same as KB4022218 (nevertheless for Word 2010)

Other Office products

Microsoft Word Viewer

Microsoft Office Viewers and Office Compatibility Pack

SharePoint Server 2016

SharePoint Server 2013

SharePoint Enterprise Server 2013

SharePoint Foundation 2013

SharePoint Foundation 2013

Project Server 2013

Project Server 2013

Project Server 2010

Project Server 2010

How to download and install the July 2018 security updates

Security updates for client versions of Windows are given via the built-in updating system Windows Update. Organizations may make use of Enterprise-specific update tools to download and deploy updates.

Updates will also be provided as direct downloads on Microsoft's Update Catalog website.

Windows Update, if enabled, checks achievable updates regularly and not in real-time. If you want to download and install the newest batch of updates directly, perform the following running a manual pay attention to updates (that should pick up the updates).

Note: It is highly recommended which you create a backup before you decide to install new updates so that you just may restore it if things make a mistake.

Do the following to own a manual update check:

Tap around the Windows-key to look at the Start Menu.

Type Windows Updates and select the end result.

Click for the "look for updates" button should the update check isn't run automatically.