內容說明：

CISA於12/09至12/15在Known Exploited Vulnerabilities Catalog(KEV)中發布2個已遭駭客利用之漏洞。

影響平台：

Cleo｜Harmony、VLTrader及LexiCom
Microsoft｜Windows

處置建議：

Cleo｜Harmony、VLTrader及LexiCom
https://support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Update
Microsoft｜Windows
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49138

CVE編號：

CVE-2024-49138
CVE-2024-50623

參考資料：

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. https://nvd.nist.gov/vuln/detail/CVE-2024-50623
3. https://nvd.nist.gov/vuln/detail/CVE-2024-49138

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/information_security_information_sharing_1590/