Microsoft has just released new firmware updates for its Surface Pro 4, Surface Laptop 1 and 2, and Surface Book 1 and 2 this week (via Windows Blog Italia). These new firmware updates include a fix for the ZombieLoad CPU vulnerability that Intel revealed back in May. ZombieLoad is a new variant of the Meltdown and Spectre CPU flaws that affected all modern processors last year.
The release notes for all firmware updates are pretty much identical, but you can find them all below
Surface Pro 4
Surface UEFI – Firmware 108.2706.768.0 resolves potential security vulnerabilities, including Microsoft security advisory 190013
Surface Laptop 2
Surface UEFI – Firmware 137.2706.768.0 resolves potential security vulnerabilities, including Microsoft security advisory 190013.
Surface Laptop
Surface UEFI – Firmware 137.2706.768.0 resolves potential security vulnerabilities, including Microsoft security advisory 190013.
Surface Book 2
Surface UEFI – Firmware 389.2706.768.0 resolves potential security vulnerabilities, including Microsoft security advisory 190013.
Surface Book
Surface UEFI – Firmware 91.2706.768.0 resolves potential security vulnerabilities, including Microsoft security advisory 190013.
As usual, these firmware updates will roll out gradually and you may not be able to download them immediately from Windows Update. Be aware that you’ll also need to be running the Windows 10 April 2018 Update or newer to download them on your Surface device.
