14 DAY TRIAL // Microsoft has released new updates for Windows 10 devices, but this time the focus is on resolving vulnerabilities in Intel chips.
There are two updates that are now available for download, as it follows:
Only certain processors are getting the patches, and they can be downloaded and installed automatically via Windows Update or manually from the Microsoft Update Catalog.
To check the full list of processors that are targeted by these microcode updates, you can consult the list available on the KB pages linked above.
What’s new in these updates?
According to Microsoft, the new microcode patches come with security fixes for a total of four different vulnerabilities in Intel processors. These are documented on the following CVE pages:
- CVE-2019-11091 – Microarchitectural Data Sampling Uncacheable Memory (MDSUM)
- CVE-2018-12126 – Microarchitectural Store Buffer Data Sampling (MSBDS)?
- CVE-2018-12127 – Microarchitectural Load Port Data Sampling (MLPDS)
- CVE-2018-12130 – Microarchitectural Fill Buffer Data Sampling (MFBDS)
Intel explains that these security flaws could allow information disclosure, and while CVE-2019-11091 is rated with a low severity rating, the rest of the vulnerabilities have received moderate ratings.
“Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access,” Intel says in the description of CVE-2018-12126.
Needless to say, downloading and installing these patches is highly recommended for all devices where the vulnerable processors are found, as the likelihood of potential exploits is now higher.
The next round of security updates for Windows 10 with additional patches will happen on the September 2020 Patch Tuesday, which this month will take place as soon as next week. Cumulative updates will be shipped for all Windows 10 versions.