I recently patched SQL Servers that had SP3 and CU4 with the latest available Security Update. After CU4 there are 2 Security Updates available, one from 2020/02/11 and the other one from 2021/01/12.
Our IT security team is asking us to patch using this KB4535288 (2020/02/11) and we couldn't find that one so we patched using KB4583462 (2021/01/12).
My question is, are Security Updates cumulative? By applying KB4583462 (2021/01/12), my SQL version goes to 12.0.6433.1, but if I apply the KB4535288 (2020/02/11) my SQL Version goes to 12.0.6372.1, which is lower than the other.
Thanks in advance.