For the latest information regarding the Meltdown and Spectre vulnerabilities see this article: A comprehensive guide to the Meltdown and Spectre vulnerabilities
Affected patches:
Vulnerability | KB | Product | Type |
MS18-01-2K8_INTL | KB4056615 | Windows Server 2008 | Security Updates |
MS18-01-IE_INTL | KB4056568 | Internet Explorer | Security Update |
MS18-01-MR7_INTL | KB4056894 | Windows 7, Server 2008 R2 | Monthly Rollup |
MS18-01-MR8_INTL | KB4056896 | Windows Server 2012 | Monthly Rollup |
MS18-01-SO7_INTL | KB4056897 | Windows 7, Server 2008 R2 | Security Only |
MS18-01-SO8_INTL | KB4056899 | Windows Server 2012 | Security Only |
MS18-01-SO81_INTL | KB4056898 | Windows 8.1, Server 2012 R2 | Security Only |
MS18-01-SQL_INTL | KB4052987 | SQL Server 2016, 2017 | Security Updates |
MS18-01-W10_INTL | KB4056888 | Windows 10 | Cumulative Update and Delta Update |
How to Scan and/or Repair against a custom group
Additional Information
Due to to possible BSOD issues that may occur when installing this update on system with out of date AV software, we will be adding a detection prerequisite as Windows Update does:
Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat"
Value="cadca5fe-87d3-4b96-b7fb-a231484277cc"
Type="REG_DWORD”
If key does not exist you will be offered the detection only version of this patch.
This means that the associated patch for a system will not be remediated unless the Registry key is present. This mirrors how the patches are handled by Microsoft. Full details regarding the offering of the patch, and options if the Registry key is missing, are located in the Microsoft article here: https://support.microsoft.com/en-us/help/4072699/important-information-regarding-the-windows-security-updates-released
An Example of the detection only definition being returned will contain "DETECT" in the definition name and under Patch Required it will say: No repair action specified There is also no patch information provided
An Example of the definition where the regkey is detected and you will be able to remediate
Support for the Intel 'Meltdown' security vulnerability KB4058702
Important information on detection logic for the Intel 'Meltdown' security vulnerability