內容說明

CISA於5/5至5/11在Known Exploited Vulnerabilities Catalog(KEV)中發布4個已遭駭客利用之漏洞。

 

影響平台

GeoVision｜Multiple Devices
FreeType｜FreeType
Langflow｜Langflow

 

處置建議

 
修補說明請參考以下官方連結：

GeoVision｜Multiple Devices
https://dlcdn.geovision.com.tw/TechNotice/CyberSecurity/Security_Advisory_IP_Device_2024-11.pdf

FreeType｜FreeType
https://source.android.com/docs/security/bulletin/2025-05-01

Langflow｜Langflow
https://github.com/advisories/GHSA-c995-4fw3-j39m 
 
 

CVE編號

CVE-2024-6047
CVE-2024-11120
CVE-2025-3248
CVE-2025-27363

 

參考資料

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog 
2. https://nvd.nist.gov/vuln/detail/CVE-2024-6047 
3. https://nvd.nist.gov/vuln/detail/CVE-2024-11120 
5. https://nvd.nist.gov/vuln/detail/CVE-2025-3248 
4. https://nvd.nist.gov/vuln/detail/CVE-2025-27363 

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/ef434531-c1b5-49b0-a051-18a9a8ef9c92/
發布日期：23/05/2025