內容說明

CISA於3/10至3/16在Known Exploited Vulnerabilities Catalog(KEV)中發布8個已遭駭客利用之漏洞。

 

影響平台

Juniper｜Junos OS
Apple｜iOS、iPadOS、macOS、visionOS及Safari
Microsoft｜Windows

 

處置建議

 
修補說明請參考以下官方連結：

Juniper｜Junos OS
https://supportportal.juniper.net/s/article/2025-03-Out-of-Cycle-Security-Bulletin-Junos-OS-A-local-attacker-with-shell-access-can-execute-arbitrary-code-CVE-2025-21590?language=en_US

Apple｜iOS、iPadOS、macOS、visionOS及Safari
https://support.apple.com/en-us/122281 
https://support.apple.com/en-us/122283 
https://support.apple.com/en-us/122284 
https://support.apple.com/en-us/122285

Microsoft｜Windows
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24983 
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24984 
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24985 
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24991 
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24993 
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-26633 
 
 

CVE編號

CVE-2025-21590
CVE-2025-24201
CVE-2025-24983
CVE-2025-24984
CVE-2025-24985
CVE-2025-24991
CVE-2025-24993
CVE-2025-26633

 

參考資料

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog 
2. https://nvd.nist.gov/vuln/detail/CVE-2025-21590 
3. https://nvd.nist.gov/vuln/detail/CVE-2025-24201 
4. https://nvd.nist.gov/vuln/detail/CVE-2025-24983 
5. https://nvd.nist.gov/vuln/detail/CVE-2025-24984 
6. https://nvd.nist.gov/vuln/detail/CVE-2025-24985 
7. https://nvd.nist.gov/vuln/detail/CVE-2025-24991 
8. https://nvd.nist.gov/vuln/detail/CVE-2025-24993 
9. https://nvd.nist.gov/vuln/detail/CVE-2025-26633 

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/9f6643c7-7e52-48e0-b5b1-c62359e184d1/
發布日期：24/03/2025