• 發布單位:TWCERT/CC
• 更新日期:2026-06-09
• 點閱次數:186

• 內容說明

CISA於5/18至5/24在Known Exploited Vulnerabilities Catalog(KEV)中發布10個已遭駭客利用之漏洞。

• 影響平台

Drupal｜Core

Langflow｜Langflow

Trend Micro｜Apex One

Microsoft｜Windows

Microsoft｜DirectX

Adobe｜Acrobat and Reader

Microsoft｜Internet Explorer

Microsoft｜Defender

• 處置建議

修補說明請參考以下官方連結：

Drupal｜Core

https://www.drupal.org/sa-core-2026-004

Langflow | Langflow

https://github.com/langflow-ai/langflow

https://github.com/langflow-ai/langflow/releases/tag/v1.9.3

https://github.com/langflow-ai/langflow/issues/11465#event-25774545848

Trend Micro｜Apex One

https://success.trendmicro.com/en-US/solution/KA-0023430

Microsoft｜Windows

https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067

Microsoft｜DirectX

https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028

Adobe｜Acrobat and Reader

https://www.cisa.gov/news-events/s/2009/10/13/adobe-reader-and-acrobat-vulnerabilities

https://web.archive.org/web/20120324170253/http://www.adobe.com/support/security/bulletins/apsb09-15.html#:~:text=CVE%2D2009%2D3459).-,NOTE%3A,-There%20are%20reports

Microsoft｜Internet Explorer

https://learn.microsoft.com/en-us/security-updates/SecurityAdvisories/2010/979352

https://learn.microsoft.com/en-us/security-updates/securityadvisories/2010/981374

Microsoft｜Defender

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41091

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-45498

• CVE編號

CVE-2008-4250

CVE-2009-1537

CVE-2009-3459

CVE-2010-0249

CVE-2010-0806

CVE-2025-34291

CVE-2026-9082

CVE-2026-34926

CVE-2026-41091

CVE-2026-45498