Windows: How to get latest CPU microcode without modding the BIOS

Intel microcode updates to Specter Variant 2

https://support.microsoft.com/en-us/help/4100347/
http://www.catalog.update.microsoft.com/Search.aspx?q=kb4100347

 

That`s only for 1803.

Summary page is updated
https://support.microsoft.com/en-gb/help/4093836/summary-of-intel-microcode-updates

 

Nice, will patch my notebook Sandy Bridge after all.

 

nice thanks for sharing

 

still waiting for older CPUS microcode updates (especially first and second core generations)... Yes, I know that some architecture were cut-off by Intel (ie: pre-nehalem CPUs and high-end tier nehalem CPUs)

According to the last intel paper, this catalog is still not yet compelted: https://support.microsoft.com/en-us...or-windows-10-version-1803-and-windows-server

 

I got rid of the fix again, it causes strange behaviour.

For example custom filters of uBlock Origin don't load anymore, have to refresh the page manually.

Then again i applied it the BIOS way, with UEFI Bios Updater.

 

Meanwhile there are new variants ... Sometimes it feels like this will never be fixed.

 

I'll imagine that's going to be the case for a while yes, older CPU's might not even get bios updates and have to rely on software patches and then as it's a hardware issue it's going to have people exploit and find new variants as older methods are closed or at least more secured against attacks.

Eight now I think, four of them being rated critical and then variants to these different types if I understood correctly. Intel and AMD is in a bit of a situation though Microsoft has patched some of it via software and for supported CPU's there's active bios support still though either of these two might carry a performance deficit in turn but I guess it's better than being compromised if one does fall victim to however this exploit can be utilized.

Hardware upgrade is costly too, older systems that's well it will usually be a new motherboard but then there's RAM and what not too and I don't think either AMD or Intel have CPU's out yet that fully close this vulnerability, at least not yet.

 

Microsoft finally updated page for 1709 - they issued updated KB (v.3), and finally for older CPUs (down to Sandy Bridge)
https://support.microsoft.com/en-us/help/4090007/intel-microcode-updates

and for 1703
https://support.microsoft.com/en-us/help/4091663/kb4091663-intel-microcode-updates

and for 1607
https://support.microsoft.com/en-us/help/4091664/kb4091664-intel-microcode-updates

and for RTM
https://support.microsoft.com/en-us/help/4091666/kb4091666-intel-microcode-updates

 

So I updated to 1803, and no new microcode for my 4930. Only after installation of corresponding standalone KB microcode is updated.

 

Yes, Nothing came built into 1803 and you need to manually install the micro-code patch, nothing yet in WP.

 

These updates are optional possibly because they affect performance and there's still no sign of malicious usage for either Meltdown or Spectre in wild.

 

Yup, I have mine all disabled now.
Maybe when I upgrade CPU I will enable.

 

i guess it not hard to see why.

At this point I might not even bother with "patches" or Microcodes or the bios updates

 

As i mentioned before, even though i have no performance hit my PC does behave different with it installed.

I will install it once these exploits get abused.

 

which probably when they will become mandatory updates and pushed threw WU for everyone

 

Had to manually update the BIOS on a Dell laptop with a 4th gen core CPU 'cause the update still doesn't automatically download on a lot of supported systems (what the hell are still they waiting for?). Now waiting for gen1 and gen2 core processors.

 

The latest Intel update (microcode-20180703.tgz*) has no microcode.dat file in it.
How to make it work with the vmware driver?


* link: https://downloadcenter.intel.com/download/27945/Linux-Processor-Microcode-Data-File

 

All microcodes are stored in folder "intel-ucode". Not suitable for VMWare driver. But suitable for UBU tool.

Btw, I see newer one mentioned on the page your linked
https://downloadcenter.intel.com/download/27776/Linux-Processor-Microcode-Data-File?v=t

 

I manually downloaded Windows10.0-KB4100347-x64 for my Haswell Intel i7-4770K and after a couple of restarts AIDA shows the CPU microcode has been updated from 22h to 24h.

However, inSpectre v8 still shows System is Spectre protected: NO! It claims there is a microcode update and there is a new option to Enable Spectre Protection. When I click on it, it changes to Disable Spectre Protection, suggesting it is enabled but when I exit and reload inSpectre it still claims that there is no Spectre protection.

Should this microcode update protect my PC from Spectre then? I assumed the update would automatically enable the protection but inSpectre seems to suggest that it has to enabled manually and that option isn't working for me.

/is confused :-/