Microsoft has released established new microcode patches from Intel that address Spectre vulnerabilities, and then the recently disclosed Foreshadow attacks.

The updates are accessible for all supported versions of Windows 10 and Windows Server.

As noted relating to the support page for Windows 10 version 1803, the microcode updates include mitigations for Spectre Variant 3a, CVE-2018-3640, Spectre Variant 4, CVE-2018-3639, and as well two of the Foreshadow bugs, CVE-2018-3615 and CVE-2018-3646, may be also known as L1TF or 'L1 Terminal Fault'.

As Microsoft recently highlighted, Windows machines with affected Intel CPUs will have microcode as well as software patches to mitigate the Foreshadow attacks.

Microsoft began helping Intel deliver its microcode updates after Intel first commenced addressing the Meltdown and Spectre CPU flaws in January. The microcode updates help mitigate Spectre Variant 2, CVE 2017-5715.

Foreshadow includes CVE-2018-3615, which affects Intel's Software Guard Extensions (SGX) enclaves, while CVE-2018-3620 affects operating-system and System Management Mode (SMM) memory. CVE-2018-3646 impacts virtualization.

Microsoft made the updates, all dated 8/20/2018, on the Microsoft Update Catalog today.