Vulnerability in CPU Microcode Could Allow Information Disclosure

Microsoft is aware of a new publicly disclosed class of vulnerabilities referred to as “speculative execution side-channel attacks” that affect many modern processors and operating systems including Intel, AMD, and ARM. Note: this issue will affect other systems such as Android, Chrome, iOS, MacOS, so we advise customers to seek out guidance from those vendors.

Microsoft has not received any information to indicate that these vulnerabilities have been used to attack customers at this time.

For more details, please see
https://portal.msrc.microsoft.com/en...sory/ADV180002

More links & info:

https://www.techrepublic.com/article...ndows-systems/

http://www.zdnet.com/article/securit...rs-vulnerable/

http://www.zdnet.com/article/google-...-amd-affected/

Quote:

---

you won’t get any patches installed unless and until your antivirus software sets a specific registry key. If you’re running third party antivirus, it has to be updated before the Meltdown patch installer will run. It looks like there are known problems with bluescreens for some AV products.

---

https://www.askwoody.com/2018/ms-def...aded-your-way/

Read the whole article esp if you are running Windows servers.

Quote:

---

Note that the Windows Server patches are NOT enabled by default. Those of you who want to turn on Meltdown protection have to change the registry.

---

More from MS: https://support.microsoft.com/en-us/...dates-released

Google has some info and list of affected products here.

https://security.googleblog.com/2018...-you-need.html

Additional info:

https://www.techrepublic.com/article...-with-your-pc/

http://www.zdnet.com/article/windows...our-antivirus/

Live list of updated or soon to be updated a/v's that allow the patch(es)..


https://docs.google.com/spreadsheets...sle=true#gid=0

Apple confirms iPhone and Mac systems are affected.

https://support.apple.com/en-us/HT208394

Yet more info from MS on antivirus programs preventing updates and/or causing blue screens (and what they're doing about it)

https://support.microsoft.com/en-us/...tivirus-softwa

And more re: Win7 bluescreens...

https://answers.microsoft.com/en-us/...=1515190079156

And even more.. blue screens may be more than just a/v related..

https://social.technet.microsoft.com...fter-kb4056894

Dell has released info for both client and servers that are affected. These systems can receive patched Firmware via Dell BIOS release.

http://www.dell.com/support/article/...oducts?lang=en

http://www.dell.com/support/article/...rking-?lang=en

Latest info for AMD CPU PCs:

http://www.zdnet.com/article/meltdow...based-devices/