Microsoft, Intel release security update for MMIO vulnerability on Windows 10, Server 2016

Back in June 2022, Intel and Microsoft issued a warning about security vulnerabilities related to CPU memory-mapped I/O (MMIO), collectively known as “MMIO Stale Data Vulnerabilities”. A threat actor, upon successful exploitation of a vulnerable system, can read privileged information on such a machine.

Last month, updated fixes were released for several versions of Windows 10 and Windows 11. A few days ago, Microsoft and Intel have now updated the files for Windows 10 version 1507 (which is the original release) as well as Windows Server 2016. Microsoft describes the vulnerability on its support document:

Abstract

Intel has issued an “Intel Processors MMIO Stale Data Advisory.” This security advisory states that memory-mapped I/O (MMIO) for some Intel processors contains potential security vulnerabilities that could allow information disclosure.

improvement

Intel Platform Update (IPU) 2022.1 dated June 2022 includes fixes for security vulnerabilities including memory-mapped I/O (MMIO) side-channel attacks.

Updates can be downloaded manually from the Microsoft Update Catalog website at the links below.

In case you’re wondering, these will download the necessary updated DLL files to your system. For Windows 10 1507 (x86), the file name and version are mcupdate_GenuineIntel.dll and 10.0.10240.19807. Meanwhile, for x64, there are filename and version

Similarly, for Windows Server 2016, the file name and version are mcupdate_GenuineIntel.dll and 10.0.14393.5793 for x86, and for x64, they are mcupdate_GenuineIntel.dll and 10.0.14393.5793.