Meltdown and Spectre
Image Courtesy:

Microsoft recently promised to mitigate vulnerability in Intel Skylake chipset on Windows 10, and today the software giant is rolling out a new security update to fix the vulnerabilities. Windows 10 KB4090007 download links are available from Microsoft’s Update Catalog, but it won’t install automatically.

Microsoft is today releasing KB4090007 for Windows 10 devices running the Fall Creators Update (version 1709), and this update is only for the devices with Intel Skylake. Windows 10 KB4090007 offline installer is also available and it can be used to mitigate the vulnerabilities. It is also worth noting that the update is based on latest microcode updates released by the chipmaker Intel last month.

Intel recently developed these patches, and after testing the updates with Windows 10 operating system, Microsoft is today finally releasing these updates. Microsoft is working with Intel and the software giant will be rolling out the security updates to more devices with different chipsets in the future. The rollout plan depends on when Intel completes development and Microsoft checks microcode compatibility with Windows 10.

For now, only Skylake processors are getting these firmware security updates. Today’s patch is however not available through Windows Update (OTA), Microsoft is only allowing users to download the updates from their update catalog website and the update needs to be performed manually.

KB4090007 Download Links for Windows 10

Windows 10 KB4090007 Direct Download Links: 64-bit (x64).

Intel discovered and disclosed the Meltdown and Spectre vulnerability in early January, but the first series of mitigations were causing a number of issues on Windows 10 and Linux hardware. As a result, Intel pulled the security updates and the company began working on security patches with a fix for unexpected reboots issue.

Microsoft recently developed a new concept to improve the way Windows 10 handles an update, for example, the company recently implemented a limit that requires antivirus software for Windows 10 to set a dedicated registry key. Microsoft is also working with Intel and the antivirus vendors to make sure that all their products are compatible with future Windows 10 releases.

“We require that AV software is up to date and compatible. We will continue to require that an AV compatibility check is made before delivering the latest Windows security updates via Windows Update, until we have a sufficient level of AV software compatibility. We recommend users check with their AV provider on the compatibility of their installed AV software products,” Microsoft’s John Cable, Director of Program Management said in a blog post.