Nicely done, and thank you! My only quibble is with KB4471984, which I suggest ought to be described as KB4471990 was, to show it contains the three security only npdXX files. Also one addition: for those who demand everything, the December Malicious Software Removal Tool, KB890830 is out there at the MS Update Catalog as well. (It's easily overlooked, as the same file apparently works on Win 7 and Win Server 2008 R2 as well.)
As for this being "my job" ... well, no. The thing is, I'm multi-booting on this system with Win 10 v1809. Win 10 v1803, Win 7, and Vista. And for most of this year, since the unveiling of the Spectre and Meltdown vulnerabilities, it's seemed sensible to keep control of system updates in my own hands rather than trust MS system updates to make everything right automatically. To do that, I have to go out to the MS Update Catalog site at least once a month and see what's there. Since I'm looking at updates for three operating systems, adding a fourth is no big deal. And then I might as well share what I've learned with other Vista users, who are by definition compatriots .... and if I screw up, as alas happens now and then, we've all got GreenHillManiac to chomp down on that big cigar and set things right!
What else? There are updates aimed specifically at .NET 3.5 this month, which is kind of ... unusual. Unusual enough that noting them specifically is probably worth doing. Generalizing wildly, some .NET patches conflict with others, and some don't. Specfically, there are a batch of .NET 2 patches, generally with names like WINDOWS6.0-KBXXXXXXX- .... MSU, that everybody ought to have on their system (or at least try to have; some of these get obsoleted and won 't install). There are some .NET 3.5 patches, named NDP3.5xxxxx or such, and they ought to be installed. Then there are .NET 4 patches, an unholy mess. These last have numbers like 4.0.X, 4.5.X, 4.6.X, and 4.7.X. The 4.0 series is aimed at Win XP, I suspect. People with 4.5 and 4.6 versions of .NET can't use the 4.0 patches. People with 4.5.0 can install 4.5.1 patches and 4.5.2 and so on, but not 4.6.X or 4.7.X patches. However, people with 4.6 can install 4.7 patches -- in fact folks at MS sometime seem confused, and you'll get something described as a .NET 4.6 patch at the MSUC site which refers to itself as a .NET 4.7 patch during installation.
Hmmmm. I seem to have made a post here even if Tamris did do the heavy lifting this time. Christmas season, I recall, and this was a present. Thank your for the lovely gift, Tamris!