內容說明

CISA於3/24至3/30在Known Exploited Vulnerabilities Catalog(KEV)中發布3個已遭駭客利用之漏洞。

 

影響平台

Google｜Chromium Mojo
Sitecore｜CMS and Experience Platform (XP)

 

處置建議

 
修補說明請參考以下官方連結：

Google｜Chromium Mojo
https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html 

Sitecore｜CMS and Experience Platform (XP)
https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB0038556 
https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB0334035 
 
 

CVE編號

CVE-2019-9874
CVE-2019-9875
CVE-2025-2783

 

參考資料

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog 
2. https://nvd.nist.gov/vuln/detail/CVE-2019-9874 
3. https://nvd.nist.gov/vuln/detail/CVE-2019-9875 
4. https://nvd.nist.gov/vuln/detail/CVE-2025-2783 

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/cae0b55d-a3ca-498b-a2af-b7c3a7c52abc/
發布日期：02/04/2025