內容說明

CISA於10/13至10/19在Known Exploited Vulnerabilities Catalog(KEV)中發布6個已遭駭客利用之漏洞。

 

影響平台

Adobe｜Experience Manager (AEM) Forms
IGEL｜IGEL OS
Microsoft｜Windows
Rapid7｜Velociraptor
SKYSEA｜Client View

 

處置建議

 
修補說明請參考以下官方連結：

Adobe｜Experience Manager (AEM) Forms
https://helpx.adobe.com/security/products/aem-forms/apsb25-82.html

IGEL｜IGEL OS
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-47827

Microsoft｜Windows
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24990
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-59230

Rapid7｜Velociraptor
https://docs.velociraptor.app/announcements/advisories/cve-2025-6264/

SKYSEA｜Client View
https://www.skyseaclientview.net/news/161221/

 

CVE編號

CVE-2016-7836
CVE-2025-6264
CVE-2025-24990
CVE-2025-47827
CVE-2025-54253
CVE-2025-59230
 
 

參考資料

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. https://nvd.nist.gov/vuln/detail/CVE-2016-7836
3. https://nvd.nist.gov/vuln/detail/CVE-2025-6264
4. https://nvd.nist.gov/vuln/detail/CVE-2025-24990
5. https://nvd.nist.gov/vuln/detail/CVE-2025-47827
6. https://nvd.nist.gov/vuln/detail/CVE-2025-54253
7. https://nvd.nist.gov/vuln/detail/CVE-2025-59230