Lucene search

MicrosoftKB4512476

HistoryAug 13, 2019 - 7:00 a.m.

August 13, 2019—KB4512476 (Monthly Rollup)

2019-08-1307:00:00

Microsoft

support.microsoft.com

831

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.902 High

EPSS

Percentile

98.8%

JSON

August 13, 2019—KB4512476 (Monthly Rollup)

Customers who have applied KB4489887 or later Monthly Rollup Packages to Microsoft Server 2008 SP2 may notice a change to the operating system version string. The “build number” component of the version string increases by 1, and the revision number decreases by approximately 4000 numbers. To find out more about this change please refer to the following article.

Improvements and fixes

This security update includes improvements and fixes that were a part of update KB4507451 (released July 16, 2019) and addresses the following issues:

Security updates to Windows App Platform and Frameworks, Windows Input and Composition, Windows Virtualization, Windows Datacenter Networking, Windows Storage and Filesystems, Windows Wireless Networking, Microsoft JET Database Engine, the Microsoft Scripting Engine, and Windows MSXML.
For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

Known issues in this update

Symptom	Workaround
Devices that start up using Preboot Execution Environment (PXE) images from Windows Deployment Services (WDS) or System Center Configuration Manager (SCCM) may fail to start with the error “Status: 0xc0000001, Info: A required device isn’t connected or can’t be accessed” after installing this update on a WDS server.	This issue is resolved in KB4512499.
After installing this update, applications that were made using Visual Basic 6 (VB6), macros using Visual Basic for Applications (VBA), and scripts or apps using Visual Basic Scripting Edition (VBScript) may stop responding and you may receive an “invalid procedure call error.”	This issue is resolved in KB4517301, which is an optional update. It is now available on Microsoft Update Catalog and Windows Server Update Services (WSUS).

How to get this update

Before installing this updateMicrosoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest Rollup. SSUs improve the reliability of the update process to mitigate potential issues while installing the Rollup and applying Microsoft security fixes. If you are using Windows Update, the latest SSU (KB4493730) will be offered to you automatically. To get the standalone package for the latest SSU, search for it in the Microsoft Update Catalog.Install this update****Release Channel	Available	Next Step
Windows Update and Microsoft Update	Yes	None. This update will be downloaded and installed automatically from Windows Update.
Microsoft Update Catalog	Yes	To get the standalone package for this update, go to the Microsoft Update Catalog.
Windows Server Update Services (WSUS)	Yes	This update will automatically synchronize with WSUS if you configure Products and Classifications as follows:Product: Windows Server 2008 Service Pack 2Classification: Security Updates File informationFor a list of the files that are provided in this update, download the file information for update 4512476.