A CPU level flaw has been highlighted by Google Project Zero that affects many of the devices that we all use every day. Without going into all the technical detail (as it's still emerging) we wanted to put together checklist to help you tell if you are vulnerable and how to patch your system or application if you are. The vulnerability can be exploited by an application on your system or a webpage loaded in your browser, so the attack surface is significant. 

Do you use?

Are you protected?

How to patch
Windows 10/2016 Yes if you have KB4056892 installed

Use Windows Update (https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/adv180002, kb4056892) be aware of possible implications by AV products: https://support.microsoft.com/en-us/help/4056892/windows-10-update-kb4056892 Additionally if you are running AMD processor there is possibility of issues: https://www.theregister.co.uk/2018/01/08/microsofts_spectre_fixer_bricks_some_amd_powered_pcs/


Meltdown - Partially if running 10.13.2

Spectre - Partially mitigated in 10.13.2 supplement

Use AppStore Updates to install the latest update, please check below for more information on updates



Linux Depending on version

Release on 9th January have addressed vulnerability, please check with vendors

Ubuntu: https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown?_ga=2.6760690.1168945143.1515627735-1429194702.1515627735 

RedHat: https://access.redhat.com/errata/RHSA-2018:0008

ChromeBook Yes if you have ChromeOS >= 63 Update ChromeOS
Chrome Browser Yes if you have Chrome >= 64. Go to "chrome://settings/help" to check your version.

Prior to Chrome 64 (scheduled for release on Jan 23 2018): Full Site Isolation can be turned on by enabling a flag found at "chrome://flags/#enable-site-per-process" (go to this address in Chrome).

Firefox Browser Yes if on >= 57.0.4 Update Firefox
Apple iPhone / iPad

Meltdown - Partially if running iOS 11.2

Spectre - Partially mitigated in iOS 11.2.2

Go to Settings -> General -> Software Update and install the latest, please see below for more information on update


Android Phone No - the patch from Google has to be approved by your phone vendor for release, check manufacturer websites for updates.


VMware Yes if you apply - VMSA-2018-0002 Using Update Manager
NVIDIA Graphic Card Yes - if running latest graphics drivers

Install the latest driver, for information please see below