Not every Windows computer is receiving Microsoft's patch to address the "Meltdown" and "Spectre" vulnerabilities. The problem? Certain third-party antivirus products can conflict with the fix.
On Wednesday, Microsoft began releasing the patch, but with an important caveat: the security update will only arrive for computers running compatible antivirus software. All other computers are actually better off without the fix because for them, the security update can trigger errors, including the Blue Screen of Death.
Microsoft is working with the antivirus industry to solve the problem. Only a "small number" of products conflict with the patch, the company said, though it did not name names.
In the meantime, security expert Kevin Beaumont has compiled a list of security products that can successfully run the patch, which includes antivirus software from the top players.
Microsoft's patch is designed to address two serious design flaws in computer chips that can be used to steal sensitive data from your PC. For months now, major tech vendors have been quietly developing safeguards against the vulnerabilities under a strict embargo. But news of the flaw leaked earlier this week, forcing antivirus companies to scramble to verify their products work with the fix.
Vendors including Bitdefender, McAfee, and Trend Micro say they're still testing Microsoft's security update, though some versions of their software are ready. To receive the Microsoft patch, an antivirus product has to set a Windows registry key on the computer. For now, some vendors have decided to hold off on automatically setting that key until more testing is done.
To download Microsoft's patch on your own, you have to manually set the Windows registry key on your computer. Microsoft and antivirus vendors have published instructions on how to do it, but modifying the Windows Registry incorrectly can cause serious problems, so proceed with caution.
For more information on how you can protect yourself from the Meltdown and Spectre vulnerabilities, check out PCMag's explainer. To get all the protections, users are advised to install new patches from software and hardware makers as they arrive.