Protecting yourself can be done through BIOS, or Windows boot patches, with older motherboards the first options is rather difficult. Microsoft has released new Windows 10 patches running from build 1507 upwards to 1803, should you not have migrated to the latest Windows 10 build.
In total that sums it up to Windows 10 Version 1507, 1607, 1703 and 1709, the new microcodes include Sandy Bridge and Ivy Bridge which thus far only have been available for the current Windows 10 version 1803, reports computerbase.
Users who already have an older patch installed on their system will need to reinstall the updated update manually. The download in the Microsoft Update Catalog with the most recent date corresponds to the latest version. If you’re still on Windows 7 or Windows 8.1, you need to cross your fingers that manufacturers of motherboards, notebooks or other devices to add the new microcode in the BIOS firmware. Only then will the CPU be protected in Windows. These specific patches do not protect your system towards the other eight recent vulnerabilities recently discovered (Spectre NG).
| Version | Patch | Microcode for |
|---|---|---|
| Windows 10 1507 | KB4091666 ( Download ) | Sandy Bridge, Ivy Bridge, Haswell, Broadwell, Skylake |
| Windows 10 1511 | not available | |
| Windows 10 1607 | KB4091664 ( Download ) | Sandy Bridge, Ivy Bridge, Haswell, Broadwell, Skylake, Kaby Lake, Coffee Lake |
| Windows 10 1703 | KB4091663 ( Download ) | Sandy Bridge, Ivy Bridge, Haswell, Broadwell, Skylake, Kaby Lake, Coffee Lake |
| Windows 10 1709 | KB4090007 ( Download ) | Sandy Bridge, Ivy Bridge, Haswell, Broadwell, Skylake, Kaby Lake, Coffee Lake |
| Windows 10 1803 | KB4100347 ( Download ) | Sandy Bridge, Ivy Bridge, Haswell, Broadwell, Skylake, Kaby Lake, Coffee Lake |
