Microsoft finally starts pushing January firmware updates for Surface line

On Friday last week, Microsoft announced a range of UEFI updates for its line of Surface hardware that were aimed at protecting against the Meltdown and Spectre vulnerabilities. Unfortunately, the company chose to hold off on rolling out those updates to devices until yesterday.

The updates target the majority of the Surface lineup, with only the original Surface Pro, Surface Pro 2 and Surface 3 being excluded from the firmware updates. The changes are as follows:

Device Name	Release Notes
Surface Book 2	Surface UEFI (v388.1932.769.0) resolves security vulnerabilities, including Microsoft security advisory 180002.
Surface Laptop	Surface UEFI (v118.1925.769.0) resolves potential security vulnerabilities, including Microsoft security advisory 180002.
Surface Studio	Surface UEFI (v118.1925.769.0) resolves potential security vulnerabilities, including Microsoft security advisory 180002.
Surface Book	Intel (R) Audio Display (v10.22.1.102) improves audio stability. Intel (R) HD Graphics 520 (v22.20.16.4811) improves DirectX 12 and power performance. Intel (R) Management Engine Interface (v11.7.0.1040) improves system stability. Surface dTPM (IFX) (v5.62.3126.2) improves reliability and resolves potential security vulnerabilities, including Microsoft security advisory 170012. Surface Management Engine (v11.7.4.3330) improves reliability and resolves potential security vulnerabilities, including Microsoft security advisory 170012. Surface System Aggregator (v90.1837.256.0) improves reliability and resolves potential security vulnerabilities, including Microsoft security advisory 170012. Surface UEFI (v91.1926.768.0) improves reliability and resolves potential security vulnerabilities, including Microsoft security advisories 170012 & 180002.
Surface Pro 4	Surface UEFI (v108.1926.769.0) resolves potential security vulnerabilities, including Microsoft security advisory 180002.
Surface Pro 3 (Insider Preview)	Surface UEFI (v3.11.2250.0) resolves potential security vulnerabilities, including Microsoft security advisory 180002.

One glaring exclusion from this list is the latest Surface Pro. While the company's earlier blog post announcing the firmware updates did include it in the list, the Update History page for that device has yet to show the new firmware, suggesting Microsoft might be taking some time with that.

Another point of note is that users must be on at least the Creators Update for Windows 10 (version 1703) to receive these changes. Users of the Anniversary Update, or older, must upgrade in order to avail the protections against Meltdown and Spectre contained in the updates, making them a high priority.