We will continue to improve these mitigations against this class of vulnerabilities. Windows Update will also provide Internet Explorer and Edge mitigations. This article addresses the following vulnerabilities: This includes microcode from device OEMs and, in some cases, updates to antivirus software. To get all available protections, firmware (microcode) and software updates are required. We are working closely with industry partners including chip makers, hardware OEMs, and application vendors to protect customers. We have not yet received any information to indicate that these vulnerabilities were used to attack customers. See the following sections for more details. We have also taken action to secure our cloud services. We have released several updates to help mitigate these vulnerabilities. Therefore, we advise customers to seek guidance from those vendors. Important: This issue also affects other operating systems, such as Android, Chrome, iOS, and macOS. Specific details for these silicon-based vulnerabilities can be found in the following security advisories and CVEs:ĪDV180002 | Guidance to mitigate speculative execution side-channel vulnerabilitiesĪDV180012 | Microsoft Guidance for Speculative Store BypassĪDV180013 | Microsoft Guidance for Rogue System Register ReadĪDV180016 | Microsoft Guidance for Lazy FP State RestoreĪDV180018 | Microsoft Guidance to mitigate L1TF variantĪDV190013 | Microsoft Guidance to mitigate Microarchitectural Data Sampling vulnerabilitiesĪDV220002 | Microsoft Guidance on Intel Processor MMIO Stale Data VulnerabilitiesĬVE-2022-23825 AMD CPU Branch Type ConfusionĬVE-2022-23816 AMD CPU Branch Type Confusion This article provides guidance for a new class of silicon-based microarchitectural and speculative execution side-channel vulnerabilities that affect many modern processors and operating systems. Please check back here regularly for updates and new FAQs. Note: This article will be updated as additional information becomes available.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |