內容說明

CISA於7/21至7/27在Known Exploited Vulnerabilities Catalog(KEV)中發布6個已遭駭客利用之漏洞。

 

影響平台

SysAid｜SysAid On-Prem
Google｜Chromium
CrushFTP｜CrushFTP
Microsoft｜SharePoint

 

處置建議

 
修補說明請參考以下官方連結：

SysAid｜SysAid On-Prem
https://documentation.sysaid.com/docs/24-40-60

Google｜Chromium
https://chromereleases.googleblog.com/2025/07/stable-channel-update-for-desktop_15.html

CrushFTP｜CrushFTP
https://www.crushftp.com/crush11wiki/Wiki.jsp?page=CompromiseJuly2025

Microsoft｜SharePoint
https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft-releases-guidance-exploitation-sharepoint-vulnerability-cve-2025-53770
https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49706

  

CVE編號

CVE-2025-2775
CVE-2025-2776
CVE-2025-6558
CVE-2025-49704
CVE-2025-49706
CVE-2025-54309

 

參考資料

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. https://nvd.nist.gov/vuln/detail/CVE-2025-2775
3. https://nvd.nist.gov/vuln/detail/CVE-2025-2776
4. https://nvd.nist.gov/vuln/detail/CVE-2025-6558
5. https://nvd.nist.gov/vuln/detail/CVE-2025-49704
6. https://nvd.nist.gov/vuln/detail/CVE-2025-49706
7. https://nvd.nist.gov/vuln/detail/CVE-2025-54309

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/cc8665dc-66c0-4acc-be42-7b37d4af6aee/
發布日期：29/07/2025