內容說明

CISA於6/2至6/8在Known Exploited Vulnerabilities Catalog(KEV)中發布9個已遭駭客利用之漏洞。

 

影響平台

Google｜Chromium V8
Qualcomm｜Multiple Chipsets
ASUS｜Routers
ConnectWise｜ScreenConnect
Craft CMS｜Craft CMS
ASUS｜RT-AX55 Routers

 

處置建議

 
修補說明請參考以下官方連結：

Google｜Chromium V8
https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html

Qualcomm｜Multiple Chipsets
https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html

ASUS｜Routers
https://www.asus.com/us/supportonly/lyra%20mini/helpdesk_bios/
https://www.asus.com/us/supportonly/rog%20rapture%20gt-ac2900/helpdesk_bios/

ConnectWise｜ScreenConnect
https://www.connectwise.com/company/trust/security-bulletins/screenconnect-security-patch-2025.4

Craft CMS｜Craft CMS
https://github.com/craftcms/cms/pull/17220
https://github.com/craftcms/cms/security/advisories/GHSA-2p6p-9rc9-62j9

ASUS｜RT-AX55 Routers
https://www.asus.com/networking-iot-servers/wifi-6/all-series/rt-ax55/helpdesk_bios/?model2Name=RT-AX55
https://www.asus.com/content/asus-product-security-advisory/

  

CVE編號

CVE-2021-32030
CVE-2023-39780
CVE-2024-56145
CVE-2025-3935
CVE-2025-5419
CVE-2025-21479
CVE-2025-21480
CVE-2025-27038
CVE-2025-35939

 

參考資料

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog 
2. https://nvd.nist.gov/vuln/detail/CVE-2021-32030 
3. https://nvd.nist.gov/vuln/detail/CVE-2023-39780 
4. https://nvd.nist.gov/vuln/detail/CVE-2024-56145 
5. https://nvd.nist.gov/vuln/detail/CVE-2025-3935 
6. https://nvd.nist.gov/vuln/detail/CVE-2025-5419 
7. https://nvd.nist.gov/vuln/detail/CVE-2025-21479 
8. https://nvd.nist.gov/vuln/detail/CVE-2025-21480 
9. https://nvd.nist.gov/vuln/detail/CVE-2025-27038 
10. https://nvd.nist.gov/vuln/detail/CVE-2025-35939  

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/dd72dd80-0ca2-4764-960e-03601162b112/
發布日期：11/06/2025