Windows 10 meltdown update download
Many of the patches released in May and July are not enabled for desktop systems as well. The patching administrator needs to determine if you can accept the risk and not enable these updates. Remember that these vulnerabilities depend on malware running locally to successfully launch an exploit. Users and administrators need to practice good security hygiene by keeping their software up-to-date and avoid suspicious links and downloads.
The only long-term fix for all Spectre and Meltdown vulnerabilities is to totally redesign chipsets, and there are no new chipsets on the immediate horizon.
In the meantime, these are the best options for mitigating Spectre and Meltdown risk on Windows systems. A proof of concept has been published, but as of this posting, no attacks have been seen in the wild. Microsoft includes these Spectre vulnerabilities in one advisory. They prey on systems with microprocessors that use speculative execution and branch prediction, and they might allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
To enable this update you need to install firmware updates as well as any Microsoft software update released since March Inventory your systems to determine what hardware is installed on your machines. You can use various scripts or PowerShell to do this. Next, review the Intel Microcode update page to determine what updates you need for your hardware.
If you have machines that will not receive an update, you will need to review the risk they present. This Meltdown vulnerability preys on systems with microprocessors that use speculative execution and indirect branch prediction.
Patch these vulnerabilities using the same process for the two vulnerabilities described above. Windows patches for Rogue Data Caches are enabled by default for workstations but not on servers. We will continue to work with chipset and device makers as they offer more vulnerability mitigations. This update includes microcode updates from Intel for the following CPUs:.
You can download this update by clicking here. Download link. Officially named the April Update , it was supposed to have been released on April 10 but was pulled back due to reliability issues. Speaking of bugs, it appears that one of the serious flaws that was fixed with the update has something to do with Meltdown Intel chip flaw.
However, Microsoft quietly included a fix for this issue with the latest Windows 10 April Update. Yep, yet another patch to fix a patch …. The fix to Meltdown comes in the form of security patches that will, for the time, limit the problem.
Microsoft has already released these patches and they should be available through a Windows update. Check Windows for Update from the Settings app before you download and install the update manually. The above patches are for the Meltdown bug only. Spectre is still a problem that cannot be resolved with a software patch though Intel is stating otherwise.
0コメント