Associate CVE-2019-14607 with change from 2019-11-15 microcode release

There's no advisory which specifically pins this to the 11-15 release, but
everything points to it and I guess that's about as good as it gets...