Users will need:
member of the farm administrators group
local admin on SharePoint server
Security Admin and DBCreator role on SQL
db_owner on all existing SharePoint databases
This blog post lays out additional details and recommendations, including a recommendation to grant these permissions to a group rather than individual users, so that you can add/...
if you apply the SharePoint Server 2010 September 2019 CU, it will cover all the security fix (CVE-2019-1257,CVE-2019-1260, CVE-2019-1295).
You have SharePoint server then it is advisable to install the server cu which include the foundation cu as well.