• 發布單位:TWCERT/CC
• 更新日期:2026-04-22
• 點閱次數:749

• 內容說明

CISA於4/13至4/19在Known Exploited Vulnerabilities Catalog(KEV)中發布10個已遭駭客利用之漏洞。

• 影響平台

Adobe｜Acrobat

Adobe｜Acrobat and Reader

Apache｜ActiveMQ

Fortinet｜FortiClient EMS

Microsoft｜Office

Microsoft｜SharePoint Server

Microsoft｜Visual Basic for Applications (VBA)

Microsoft｜Windows

Microsoft｜Exchange Server

• 處置建議

修補說明請參考以下官方連結：

Adobe｜Acrobat

https://helpx.adobe.com/security/products/acrobat/apsb20-48.html

Adobe｜Acrobat and Reader

https://helpx.adobe.com/security/products/acrobat/apsb26-43.html

Apache｜ActiveMQ

https://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt

Fortinet｜FortiClient EMS

https://fortiguard.fortinet.com/psirt/FG-IR-25-1142

Microsoft｜Office

https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009

Microsoft｜SharePoint Server

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201

Microsoft｜Visual Basic for Applications (VBA)

https://learn.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046

Microsoft｜Windows

https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-36424

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710

Microsoft｜Exchange Server

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529

• CVE編號

CVE-2009-0238

CVE-2012-1854

CVE-2020-9715

CVE-2023-21529

CVE-2023-36424

CVE-2025-60710

CVE-2026-21643

CVE-2026-32201

CVE-2026-34197

CVE-2026-34621