• 發布單位:TWCERT/CC
• 更新日期:2025-10-17
• 點閱次數:207

• 內容說明：

CISA於10/6至10/12在Known Exploited Vulnerabilities Catalog(KEV)中發布9個已遭駭客利用之漏洞。

• 影響平台：

Grafana Labs｜Grafana

Linux｜Kernel

Microsoft｜Internet Explorer

Microsoft｜Windows

Mozilla｜Multiple Products

Oracle｜E-Business Suite

Synacor｜Zimbra Collaboration Suite (ZCS)

• 處置建議：

修補說明請參考以下官方連結：

Grafana Labs｜Grafana

https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/

Linux｜Kernel

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=9fa492cdc160cd27ce1046cb36f47d3b2b1efa21

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=b29c457a6511435960115c0f548c4360d5f4801d

https://security.netapp.com/advisory/ntap-20210805-0010/

https://github.com/google/security-research/security/advisories/GHSA-xxx5-8mvq-3528

Microsoft｜Internet Explorer

https://learn.microsoft.com/en-us/security-updates/SecurityAdvisories/2010/2458511?redirectedfrom=MSDN

Microsoft｜Windows

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43226

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-087

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-090

Mozilla｜Multiple Products

https://www.mozilla.org/en-US/security/advisories/mfsa2010-73

Oracle｜E-Business Suite

https://www.oracle.com/security-s/-cve-2025-61882.html

Synacor｜Zimbra Collaboration Suite (ZCS)

https://wiki.zimbra.com/wiki/Security_Center

• CVE編號：

CVE-2010-3765

CVE-2010-3962

CVE-2011-3402

CVE-2013-3918

CVE-2021-22555

CVE-2021-43226

CVE-2021-43798

CVE-2025-27915

CVE-2025-61882