{"id":1637,"date":"2023-09-14T08:07:04","date_gmt":"2023-09-14T08:07:04","guid":{"rendered":"https:\/\/certera.com\/blog\/?p=1637"},"modified":"2023-09-14T08:07:06","modified_gmt":"2023-09-14T08:07:06","slug":"new-downfall-vulnerability-threatens-windows-devices-microsoft-acts","status":"publish","type":"post","link":"https:\/\/certera.com\/blog\/new-downfall-vulnerability-threatens-windows-devices-microsoft-acts\/","title":{"rendered":"New “Downfall” Vulnerability Threatens Windows Devices – Microsoft Acts Swiftly"},"content":{"rendered":"\n

Instructions on addressing a security issue in Windows, known as the gather data sampling (GDS) or Downfall<\/a> <\/strong>vulnerability, have been recently released by Microsoft. <\/p>\n\n\n\n

This vulnerability, known as CVE-2022-40982<\/strong>, affects Windows 10 <\/strong>and 11 <\/strong>operating systems, Windows Server<\/strong> versions 2019 <\/strong>and 2022<\/strong>, as well as specific Intel processor versions<\/strong>. Recent Intel chips like Raptor Lake, Sapphire Rapids, and Alder Lake are unaffected.<\/p>\n\n\n\n

Successfully exploiting the vulnerability could enable – “data inference from impacted CPUs across security barriers, like TEE (trusted execution environments), virtual machines, processes, and user-kernel.”<\/p>\n\n\n\n

To protect your computer from potential exploits related to this vulnerability, Microsoft has provided guidance in a document called KB5029778<\/strong>. This document explains – “How IT administrators can set up safeguards<\/strong>” and also “How to turn off these guards if needed<\/strong>.”<\/p>\n\n\n\n

To fix the issue, administrators need to install an update called “Intel Platform Update 23.3 microcode<\/strong>.” This update is usually provided by the manufacturer that made the equipment, so you should contact them for information on how to get and install it. You can find a list of companies and links for the update on Intel’s web presence<\/a>.<\/p>\n\n\n\n

The protective measures are automatically turned on when the update is installed. While it is generally not recommended to turn off these measures, it might be necessary sometimes. <\/p>\n\n\n\n

Microsoft allows you to disable the protective measures if the vulnerability is not part of the threat model and if these updates are installed on your computer:<\/strong><\/p>\n\n\n\n