Meltdown and Spectre have been all over the news this week. These two new security CPU vulnerabilities can give apps unauthorized access to the kernel memory on chips not just from Intel but also from AMD and ARM. Companies like Microsoft have already released updates to fix and patch the vulnerabilities.
Microsoft has now also published a new UEFI update for many of its Surface devices. This update will protect the devices against Meltdown and Spectre. The following devices are getting the update:
- Surface Pro 3
- Surface Pro 4
- Surface Pro (2017)
- Surface Pro (2017) with LTE Advanced
- Surface Book
- Surface Book 2
- Surface Studio
- Surface Laptop
On a security support page, Microsoft noted that they have not received any information to indicate that these vulnerabilities have been used to attack customers at this time. The company will continue to work closely with industry partners including chip makers, hardware OEMs, and app vendors to protect customers.