內容說明

CISA於3/3至3/9在Known Exploited Vulnerabilities Catalog(KEV)中發布4個已遭駭客利用之漏洞。

 

影響平台

VMware｜ESXi, Workstation, and Fusion
Linux｜Kernel

 

處置建議

 
修補說明請參考以下官方連結：

VMware｜ESXi, Workstation, and Fusion
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390

Linux｜Kernel
https://lore.kernel.org/linux-cve-announce/2024111908-CVE-2024-50302-f677@gregkh/ 
https://source.android.com/docs/security/bulletin/2025-03-01 

 

CVE編號

CVE-2024-50302
CVE-2025-22224
CVE-2025-22225
CVE-2025-22226

 

參考資料

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog 
2. https://nvd.nist.gov/vuln/detail/CVE-2024-50302 
3. https://nvd.nist.gov/vuln/detail/CVE-2025-22224 
4. https://nvd.nist.gov/vuln/detail/CVE-2025-22225 
5. https://nvd.nist.gov/vuln/detail/CVE-2025-22226 

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/f6e584ab-2a47-4a73-83bf-b8c36e792e5a/
發布日期：12/03/2025