內容說明：

CISA於5/13至5/19在Known Exploited Vulnerabilities Catalog(KEV)中發布6個已遭駭客利用之漏洞。

影響平台：

受影響廠商與產品名稱如下：
Google｜Chromium V8 Engine
Google｜Chromium Visuals
D-Link｜DIR-600 Router
D-Link｜DIR-605 Router
Microsoft｜DWM Core Library
Microsoft｜Windows MSHTML Platform

處置建議：

修補說明請參考以下官方連結：
Google｜Chromium V8 Engine
https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_13.html
Google｜Chromium Visuals
https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html
D-Link｜DIR-600 Router
https://legacy.us.dlink.com/pages/product.aspx?id=4587b63118524aec911191cc81605283
D-Link｜DIR-605 Router
https://legacy.us.dlink.com/pages/product.aspx?id=2b09e95d90ff4cb38830ecc04c89cee5
Microsoft ｜DWM Core Library
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051
Microsoft ｜Windows MSHTML Platform
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30040

CVE編號：

CVE-2014-100005
CVE-2021-40655
CVE-2024-4671
CVE-2024-4761
CVE-2024-30040
CVE-2024-30051

參考資料：

https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://nvd.nist.gov/vuln/detail/CVE-2014-100005
https://nvd.nist.gov/vuln/detail/CVE-2021-40655
https://nvd.nist.gov/vuln/detail/CVE-2024-4671
https://nvd.nist.gov/vuln/detail/CVE-2024-30040
https://nvd.nist.gov/vuln/detail/CVE-2024-30051
https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_13.html
https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html
https://legacy.us.dlink.com/pages/product.aspx?id=4587b63118524aec911191cc81605283
https://legacy.us.dlink.com/pages/product.aspx?id=2b09e95d90ff4cb38830ecc04c89cee5
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30040
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/1554/
發布日期：22/05/2024