內容說明：

CISA於10/14至10/20在Known Exploited Vulnerabilities Catalog(KEV)中發布4個已遭駭客利用之漏洞。

影響平台：

Veeam｜Backup & Replication
SolarWinds｜Web Help Desk
Mozilla｜Firefox
Microsoft ｜Windows Kernel

處置建議：

修補說明請參考以下官方連結：
Veeam｜Backup & Replication
https://www.veeam.com/kb4649
SolarWinds｜Web Help Desk
https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987
Mozilla｜Firefox
https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/
Microsoft｜Windows Kernel
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-30088

CVE編號：

CVE-2024-9680
CVE-2024-28987
CVE-2024-30088
CVE-2024-40711

參考資料：

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. https://nvd.nist.gov/vuln/detail/CVE-2024-40711
3. https://www.veeam.com/kb4649
4. https://nvd.nist.gov/vuln/detail/CVE-2024-28987
5. https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987
6. https://nvd.nist.gov/vuln/detail/CVE-2024-9680
7. https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/
8. https://nvd.nist.gov/vuln/detail/CVE-2024-30088
9. https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-30088

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/1582/
發布日期：22/10/2024