• 發布單位:TWCERT/CC
• 更新日期:2025-03-24
• 點閱次數:516

• 內容說明：

CISA於3/10至3/16在Known Exploited Vulnerabilities Catalog(KEV)中發布8個已遭駭客利用之漏洞。

• 影響平台：

Juniper｜Junos OS

Apple｜iOS、iPadOS、macOS、visionOS及Safari

Microsoft｜Windows

• 處置建議：

Juniper｜Junos OS

https://supportportal.juniper.net/s/article/2025-03-Out-of-Cycle-Security-Bulletin-Junos-OS-A-local-attacker-with-shell-access-can-execute-arbitrary-code-CVE-2025-21590?language=en_US

Apple｜iOS、iPadOS、macOS、visionOS及Safari

https://support.apple.com/en-us/122281 

https://support.apple.com/en-us/122283 

https://support.apple.com/en-us/122284 

https://support.apple.com/en-us/122285

Microsoft｜Windows

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24983

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24984

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24985 

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24991 

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24993 

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-26633 

• CVE編號：

CVE-2025-21590

CVE-2025-24201

CVE-2025-24983

CVE-2025-24984

CVE-2025-24985

CVE-2025-24991

CVE-2025-24993

CVE-2025-26633