10/13至10/19 Known Exploited Vulnerabilities Catalog(KEV)週報
- 發布單位:TWCERT/CC
- 更新日期:2025-10-31
- 點閱次數:167
- 內容說明：
CISA於10/13至10/19在Known Exploited Vulnerabilities Catalog(KEV)中發布6個已遭駭客利用之漏洞。
- 影響平台：
Adobe｜Experience Manager (AEM) Forms
IGEL｜IGEL OS
Microsoft｜Windows
Rapid7｜Velociraptor
SKYSEA｜Client View
- 處置建議：
修補說明請參考以下官方連結：
Adobe｜Experience Manager (AEM) Forms
https://helpx.adobe.com/security/products/aem-forms/apsb25-82.html
IGEL｜IGEL OS
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-47827
Microsoft｜Windows
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24990
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-59230
Rapid7｜Velociraptor
https://docs.velociraptor.app/announcements/advisories/cve-2025-6264/
SKYSEA｜Client View
https://www.skyseaclientview.net/news/161221/
- CVE編號：
CVE-2016-7836
CVE-2025-6264
CVE-2025-24990
CVE-2025-47827
CVE-2025-54253
CVE-2025-59230
相關連結
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://nvd.nist.gov/vuln/detail/CVE-2016-7836
- https://nvd.nist.gov/vuln/detail/CVE-2025-6264
- https://nvd.nist.gov/vuln/detail/CVE-2025-24990
- https://nvd.nist.gov/vuln/detail/CVE-2025-47827
- https://nvd.nist.gov/vuln/detail/CVE-2025-54253
- https://nvd.nist.gov/vuln/detail/CVE-2025-59230