Neura Market
ionescu007/SpecuCheck logo

ionescu007/SpecuCheck

Free

SpecuCheck is a Windows utility for checking the state of the software mitigations and hardware against CVE-2017-5754 (Meltdown), CVE-2017-5715 (Spectre v2), CVE-2018-3260 (Foreshadow), and CVE-2018-3639 (Spectre v4)

FreeFree tier
Type
Open Source
Visit Website GitHub (38 stars)

About ionescu007/SpecuCheck

SpecuCheck is a Windows command-line utility that checks the status of software and hardware mitigations against CPU vulnerabilities including Meltdown (CVE-2017-5754), Spectre v2 (CVE-2017-5715), Foreshadow (CVE-2018-3260), and Spectre v4 (CVE-2018-3639). It uses the NtQuerySystemInformation API with new information classes added in January 2018 patches to report data as seen by the Windows Kernel. The tool can confirm if a system is patched and show the mitigation status, which can indicate potential performance impacts. Originally created for IT departments and users, it is now considered a research tool; Microsoft recommends using their official PowerShell Cmdlet Module instead. The tool is open-source and written in C.

Key Features

Checks mitigations for Meltdown (CVE-2017-5754), Spectre v2 (CVE-2017-5715), Foreshadow (CVE-2018-3260), and Spectre v4 (CVE-2018-3639)
Uses NtQuerySystemInformation API with kernel information classes
Reports mitigation status as seen by the Windows Kernel
Simple command-line execution (single .exe)
Open source, written in C

Pros & Cons

Pros
  • Provides direct kernel-level visibility into mitigation state
  • Simple to use: just run the executable from the command line
  • Open source allows inspection and customization
  • No external dependencies; lightweight
Cons
  • Windows only; not available for other operating systems
  • Not recommended for production use (Microsoft provides an official PowerShell Cmdlet Module)
  • Limited to a specific set of CVEs (no broader vulnerability coverage)
  • Unsupported research tool with no active maintenance

Best For

Verifying system patch status after security updatesIT security auditing of CPU vulnerability mitigationsPerformance impact analysis based on mitigation statusResearch and education on kernel-level mitigation reporting

FAQ

What vulnerabilities does SpecuCheck check?
CVE-2017-5754 (Meltdown), CVE-2017-5715 (Spectre v2), CVE-2018-3260 (Foreshadow), and CVE-2018-3639 (Spectre v4).
How do I run SpecuCheck?
Simply execute SpecuCheck.exe from the command line. It will display an informational screen indicating which features/mitigations are enabled.
Is SpecuCheck still recommended?
No. Microsoft now provides an official PowerShell Cmdlet Module, which is the recommended and supported way to get this information. SpecuCheck remains only as a research tool.
What happens if the system is not patched?
The system call will fail, and the tool will display a message indicating that the system either does not have the appropriate patch or may not support the information class.