Symantec Endpoint Protection (SEP) 14.x is installed on non-R2 versions of Windows 2008 Servers. Microsoft patches fail to install.
Known affected patches:
Windows Server 2008 Monthly Rollup: KB4503273 , KB4474419, KB4507461 ,KB4503287
This issue was resolved with SONAR definition revision 20190911.001. Make sure clients update content to the latest available SONAR definitions.