Do not install the 2019-09 update on a fresh Windows 7 SP1 install without first installing the Servicing Stack Update (SSU) KB4490628 (March 2019) . Without the SSU, the September rollup will fail with "0x80070422."
As of 2023, Windows 7 is no longer supported. However, if you find an old machine still running Windows 7 that needs the September 2019 patches:
: Two specific vulnerabilities (CVE-2019-1214 and CVE-2019-1215) were fixed that had already been exploited "in the wild". These were privilege escalation flaws involving the Windows Common Log File System (CLFS) driver and Winsock, which allowed attackers to gain administrator-level control over a machine. LNK File Execution (CVE-2019-1280)
