內容說明：

CISA於1/20至2/2在Known Exploited Vulnerabilities Catalog(KEV)中發布3個已遭駭客利用之漏洞。

 

影響平台：

Apple｜iOS、iPadOS、macOS、watchOS、tvOS及visionOS
SonicWall｜SMA1000 Appliances
JQuery｜JQuery


 

處置建議：

 
修補說明請參考以下官方連結：

Apple｜iOS、iPadOS、macOS、watchOS、tvOS及visionOS
https://support.apple.com/en-us/122066
https://support.apple.com/en-us/122068
https://support.apple.com/en-us/122071
https://support.apple.com/en-us/122072
https://support.apple.com/en-us/122073

SonicWall｜SMA1000 Appliances
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002

JQuery｜JQuery
https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/

 

CVE編號：

CVE-2020-11023
CVE-2025-23006
CVE-2025-24085

 

參考資料：

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. https://nvd.nist.gov/vuln/detail/CVE-2020-11023
3. https://nvd.nist.gov/vuln/detail/CVE-2025-23006
4. https://nvd.nist.gov/vuln/detail/CVE-2025-24085

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/2d3161cf-a7a8-40fb-944f-b3b0674bdc4b/
發布日期：05/02/2025