Microsoft Releases Emergency Repair Patch for Intel CPU Vulnerabilities

Intel CPU Vulnerabilities CVE-2017-5703

Today’s news front page of science and technology sector, almost included by Intel CPU vulnerability exposure, the attacker can access protected core memory, the severity has reached the point where you must rely on the operating system-level kernel rewrite can repair, the current Intel and the major IT giants are busy making patches. Luckily, both the Linux and macOS patches were received last month in the affected operating system. Microsoft had previously planned to launch its own solution on “Patch Tuesday,” but given the tough situation, the company has decided to push a fix patch urgently that night.

It’s learned that Insider testers of the Windows 10 operating system enabled with the Fast Ring channel have been patching the patch in the second two months of 2017. As for other Windows 10 users, you have to wait for Windows Update to automatically download updates.

Intel CPU Vulnerabilities

Image: nuclearcoffee

Users of both Windows 7 and Windows 8 operating systems have long since been able to download updates from the Microsoft Web site, but the next push of Windows Update will be pushed to the patch Tuesday in February.

In a statement, Microsoft said:

“We’re aware of this industry-wide issue and have been working closely with chip manufacturers to develop and test mitigations to protect our customers. We are in the process of deploying mitigations to cloud services and have also released security updates to protect Windows customers against vulnerabilities affecting supported hardware chips from Intel, ARM, and AMD. We have not received any information to indicate that these vulnerabilities had been used to attack our customers.”

KB4056892

This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

  • Addresses issue where event logs stop receiving events when a maximum file size policy is applied to the channel.
  • Addresses issue where printing an Office Online document in Microsoft Edge fails.
  • Addresses issue where the touch keyboard doesn’t support the standard layout for 109 keyboards.
  • Addresses video playback issues in applications such as Microsoft Edge that affect some devices when playing back video on a monitor and a secondary, duplicated display.
  • Addresses issue where Microsoft Edge stops responding for up to 3 seconds while displaying content from a software rendering path.
  • Addresses issue where only 4 TB of memory is shown as available in Task Manager in Windows Server version 1709 when more memory is actually installed, configured, and available.
  • Security updates to Windows SMB Server, the Windows Subsystem for Linux, Windows Kernel, Windows Datacenter Networking, Windows Graphics, Microsoft Edge, Internet Explorer, and the Microsoft Scripting Engine.

Download

A report released today by Google reveals many details of the security breach. Intel CEO has confirmed that the problem was first discovered by Google’s Project Zero team.

After patching, the older processor’s performance may be affected. However, Intel CEO argued today: “The impact on performance, depending on the workload of how many ordinary users do not feel too obvious differences, future updates will improve this.”

Source: theverge