【資安漏洞預警】CISA新增10個已知遭駭客利用之漏洞至KEV目錄(2026/05/18-2026/05/24)

【行政公告】

公告單位	圖資處數位服務組
訊息類別	行政公告行政公告	公告對象	全體
公告主題	【資安漏洞預警】CISA新增10個已知遭駭客利用之漏洞至KEV目錄(2026/05/18-2026/05/24) [Security Vulnerability Alert] CISA adds 10 known vulnerabilities exploited by hackers to the KEV directory (2026/05/18-2026/05/24)
公告內容	轉發台灣電腦網路危機處理暨協調中心資安訊息警訊 TWCERTCC-200-202605-00000014 [內容說明] 【CVE-2008-4250】Microsoft Windows Buffer Overflow Vulnerability (CVSS v3.1: 9.8) 【是否遭勒索軟體利用:未知】 Microsoft Windows的Windows Server Service中存在緩衝區溢位漏洞，遠端攻擊者可透過特製的RPC請求，在路徑正規化過程中觸發緩衝區溢位，進而執行任意程式碼。【CVE-2009-1537】Microsoft DirectX NULL Byte Overwrite Vulnerability (CVSS v3.1: 8.8) 【是否遭勒索軟體利用:未知】 Microsoft DirectX 中的 DirectShow 元件 quartz.dll 內的 QuickTime Movie Parser Filter 存在NULL 位元組覆寫漏洞。遠端攻擊者可透過特製的QuickTime媒體檔案觸發此漏洞，進而執行任意程式碼。【CVE-2009-3459】Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability (CVSS v3.1: 8.8) 【是否遭勒索軟體利用:未知】 Adobe Acrobat and Reader 存在堆積型緩衝區溢位漏洞。遠端攻擊者可透過特製的PDF檔案觸發記憶體損毀，進而執行任意程式碼。【CVE-2010-0249】Microsoft Internet Explorer Use-After-Free Vulnerability (CVSS v3.1: 8.8) 【是否遭勒索軟體利用:未知】 Microsoft Internet Explorer存在使用釋放後記憶體漏洞。遠端攻擊者可透過存取與已刪除物件相關聯的指標，進而執行任意程式碼。【CVE-2010-0806】Microsoft Internet Explorer Use-After-Free Vulnerability (CVSS v3.1: 8.8) 【是否遭勒索軟體利用:未知】 Microsoft Internet Explorer 存在使用釋放後記憶體漏洞。遠端攻擊者可透過在物件刪除後存取無效指標的方式利用此漏洞，進而執行任意程式碼。【CVE-2026-41091】Microsoft Defender Link Following Vulnerability (CVSS v3.1: 7.8) 【是否遭勒索軟體利用:未知】 Microsoft Defender 存在連結追蹤漏洞，允許已授權的攻擊者在本機提升權限。【CVE-2026-45498】Microsoft Defender Denial of Service Vulnerability (CVSS v3.1: 4.0) 【是否遭勒索軟體利用:未知】 Microsoft Defender 存在未明確說明的漏洞，可能導致服務阻斷。【CVE-2025-34291】Langflow Origin Validation Error Vulnerability (CVSS v3.1: 8.8) 【是否遭勒索軟體利用:未知】 Langflow存在來源驗證錯誤漏洞。由於其CORS設定過於寬鬆，並且refresh token的cookie設定為SameSite=None，攻擊者可能藉此存取需要身份驗證的端點，進而執行任意程式碼，最終取得系統完整控制權。【CVE-2026-34926】Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability (CVSS v3.1: 6.7) 【是否遭勒索軟體利用:未知】 Trend Micro Apex One (on-premise) 存在目錄遍歷漏洞，可能允許經預先驗證的本地攻擊者修改伺服器上的關鍵資料表，進而注入惡意程式碼並下發至受管端點設備。【CVE-2026-9082】Drupal Core SQL Injection Vulnerability (CVSS v3.1: 9.8) 【是否遭勒索軟體利用:未知】 Drupal Core 存在SQL注入漏洞。攻擊者可透過資料庫抽象 API 發送特製請求，藉此實現權限提升及遠端程式碼執行。 [影響平台] 【CVE-2008-4250】請參考官方所列的影響版本 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067 【CVE-2009-1537】請參考官方所列的影響版本 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 【CVE-2009-3459】請參考官方所列的影響版本 https://helpx.adobe.com/security/security-bulletin.html 【CVE-2010-0249】請參考官方所列的影響版本 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002 【CVE-2010-0806】請參考官方所列的影響版本 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 【CVE-2026-41091】請參考官方所列的影響版本 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091 【CVE-2026-45498】請參考官方所列的影響版本 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498 【CVE-2025-34291】 Langflow 1.6.9(含)之前的版本【CVE-2026-34926】請參考官方所列的影響版本 https://success.trendmicro.com/en-US/solution/KA-0023430 【CVE-2026-9082】請參考官方所列的影響版本 https://www.drupal.org/sa-core-2026-004 [建議措施] 【CVE-2008-4250】官方已針對漏洞釋出修復更新，請更新至相關版本 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067 【CVE-2009-1537】官方已針對漏洞釋出修復更新，請更新至相關版本 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 【CVE-2009-3459】官方已針對漏洞釋出修復更新，請更新至相關版本 https://helpx.adobe.com/security/security-bulletin.html 【CVE-2010-0249】官方已針對漏洞釋出修復更新，請更新至相關版本 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002 【CVE-2010-0806】官方已針對漏洞釋出修復更新，請更新至相關版本 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 【CVE-2026-41091】官方已針對漏洞釋出修復更新，請更新至相關版本 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091 【CVE-2026-45498】官方已針對漏洞釋出修復更新，請更新至相關版本 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498 【CVE-2025-34291】對應產品升級至以下版本(或更高) Langflow 1.7.0 【CVE-2026-34926】官方已針對漏洞釋出修復更新，請更新至相關版本 https://success.trendmicro.com/en-US/solution/KA-0023430 【CVE-2026-9082】官方已針對漏洞釋出修復更新，請更新至相關版本 https://www.drupal.org/sa-core-2026-004 Forwarded from Taiwan Computer Network Crisis Management and Coordination Center, Cybersecurity Alert TWCERTCC-200-202605-00000014 [Content Description] 【CVE-2008-4250】Microsoft Windows Buffer Overflow Vulnerability (CVSS v3.1: 9.8) 【Exploited by Ransomware: Unknown】A buffer overflow vulnerability exists in Microsoft Windows' Windows Server Service. A remote attacker can trigger a buffer overflow during path normalization using a specially crafted RPC request, thereby executing arbitrary code. 【CVE-2009-1537】Microsoft DirectX NULL Byte Overwrite Vulnerability (CVSS v3.1: 8.8) 【Exploited by Ransomware: Unknown】A NULL byte overwrite vulnerability exists in the QuickTime Movie Parser Filter within the DirectShow component quartz.dll in Microsoft DirectX. A remote attacker could trigger this vulnerability using a specially crafted QuickTime media file, thereby executing arbitrary code. 【CVE-2009-3459】Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability (CVSS v3.1: 8.8) 【Exploited by Ransomware: Unknown】Adobe Acrobat and Reader has a heap-based buffer overflow vulnerability. A remote attacker could trigger memory corruption using a specially crafted PDF file, thereby executing arbitrary code. 【CVE-2010-0249】Microsoft Internet Explorer Use-After-Free Vulnerability (CVSS v3.1: 8.8) 【Exploited by Ransomware: Unknown】Microsoft Internet Explorer has a use-after-free memory vulnerability. A remote attacker could execute arbitrary code by accessing indicators associated with deleted objects. 【CVE-2010-0806】Microsoft Internet Explorer Use-After-Free Vulnerability (CVSS v3.1: 8.8) 【Exploited by Ransomware: Unknown】A use-after-free vulnerability exists in Microsoft Internet Explorer. A remote attacker could exploit this vulnerability by accessing invalid keys after an object is deleted, thereby executing arbitrary code. 【CVE-2026-41091】Microsoft Defender Link Following Vulnerability (CVSS v3.1: 7.8) 【Exploited by Ransomware: Unknown】A link following vulnerability exists in Microsoft Defender, allowing an authorized attacker to escalate privileges on the local machine. 【CVE-2026-45498】Microsoft Defender Denial of Service Vulnerability (CVSS v3.1: 4.0) 【Exploited by Ransomware: Unknown】An unspecified vulnerability exists in Microsoft Defender that could lead to service disruption. 【CVE-2025-34291】Langflow Origin Validation Error Vulnerability (CVSS v3.1: 8.8) 【[Exploited by Ransomware: Unknown】Langflow has an origin validation error vulnerability. Due to its overly lenient CORS settings and the refresh token cookie being set to SameSite=None, attackers could exploit this vulnerability to access authentication-required endpoints, execute arbitrary code, and ultimately gain complete system control. 【CVE-2026-34926】Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability (CVSS v3.1: 6.7) 【Exploited by Ransomware: Unknown】Trend Micro Apex One (on-premise) has a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify critical data tables on the server, inject malicious code, and distribute it to managed endpoint devices. 【CVE-2026-9082】Drupal Core SQL Injection Vulnerability (CVSS v3.1: 9.8) 【Exploitation by Ransomware: Unknown】Drupal Core contains an SQL injection vulnerability. Attackers can use the database abstraction API to send specially crafted requests, thereby achieving privilege escalation and remote code execution. [Affected Platforms] 【CVE-2008-4250】Please refer to the official list of affected versions: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067 【CVE-2009-1537】Please refer to the official list of affected versions: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 【CVE-2009-3459】Please refer to the official list of affected versions: https://helpx.adobe.com/security/security-bulletin.html 【CVE-2010-0249】Please refer to the official list of affected versions: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002 【CVE-2010-0806】Please refer to the official list of affected versions: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 【CVE-2026-41091】Please refer to the official list of affected versions: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091 【CVE-2026-45498】Please refer to the official list of affected versions: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498 【CVE-2025-34291】Langflow versions 1.6.9 and earlier 【CVE-2026-34926】Please refer to the official list of affected versions https://success.trendmicro.com/en-US/solution/KA-0023430 【CVE-2026-9082】Please refer to the affected versions listed in the official documentation: https://www.drupal.org/sa-core-2026-004 [Recommended Actions] 【CVE-2008-4250】An official patch update has been released for this vulnerability. Please update to the relevant version: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067 【CVE-2009-1537】An official patch update has been released for this vulnerability. Please update to the relevant version: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 【CVE-2009-3459】Official updates have been released to fix the vulnerabilities. Please update to the relevant version: https://helpx.adobe.com/security/security-bulletin.html 【CVE-2010-0249】Official updates have been released to fix the vulnerabilities. Please update to the relevant version: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002 【CVE-2010-0806】Official updates have been released to fix the vulnerabilities. Please update to the relevant version: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 【CVE-2026-41091】Official updates have been released to fix the vulnerabilities. Please update to the relevant version: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091 【CVE-2026-45498】An official patch update has been released for this vulnerability. Please update to the relevant version: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498 【CVE-2025-34291】For the corresponding product, upgrade to the following version (or higher): Langflow 1.7.0 【CVE-2026-34926】An official patch update has been released for this vulnerability. Please update to the relevant version: https://success.trendmicro.com/en-US/solution/KA-0023430 【CVE-2026-9082】An official patch update has been released for this vulnerability. Please update to the relevant version: https://www.drupal.org/sa-core-2026-004
相關訊息
公告時間	2026/5/26 至 2026/11/26	點閱次數	163