發佈編號

TACERT-ANA-2026041709043535

發佈時間

2026-04-17 09:01:36

事故類型

ANA-漏洞預警

發現時間

2026-04-17 09:01:36

影響等級

中

[主旨說明:]【漏洞預警】微軟釋出115年4月份安全性更新

[內容說明:]

轉發   國家資安資訊分享與分析中心 資安訊息警訊 NISAC-200-202604-00000009

微軟釋出115年4月份安全性更新，共修補165個漏洞，其中包含8個高風險漏洞與1個已遭利用之漏洞，請儘速確認並進行修補。

情資分享等級: WHITE(情資內容為可公開揭露之資訊)

此訊息僅發送到「區縣市網路中心」，煩請貴單位協助轉發與通知轄下各單位知悉

[影響平台:]

影響平台-系統

Azure Logic Apps

Microsoft Power App

Remote Desktop Client

SQL Server

NET

NET Framework

NET and Visual Studio

NET, .NET Framework, Visual Studio

Applocker Filter Driver (applockerfltr.sys)

Azure Monitor Agent

Desktop Window Manager

Function Discovery Service (fdwsd.dll)

GitHub Copilot and Visual Studio Code

影響平台-軟體

Windows Advanced Rasterization Platform

Windows IKE Extension

Windows Push Notifications

Windows Shell

Microsoft Brokering File System

Microsoft Defender

Microsoft Dynamics 365 (on-premises)

Microsoft Edge (Chromium-based)

Microsoft Graphics Component

Microsoft High Performance Compute Pack (HPC)

Microsoft Management Console

Microsoft Office

Microsoft Office Excel

Microsoft Office PowerPoint

Microsoft Office SharePoint

Microsoft Office Word

Microsoft PowerShell

Microsoft Windows

Microsoft Windows Search Component

Microsoft Windows Speech

Role: Windows Hyper-V

Universal Plug and Play (upnp.dll)

Windows Active Directory

Windows Admin Center

Windows Ancillary Function Driver for WinSock

Windows Biometric Service

Windows BitLocker

Windows Boot Loader

Windows Boot Manager

Windows COM

Windows Client Side Caching driver (csc.sys)

Windows Cloud Files Mini Filter Driver

Windows Common Log File System Driver

Windows Container Isolation FS Filter Driver

Windows Cryptographic Services

Windows Encrypting File System (EFS)

Windows File Explorer

Windows GDI

Windows HTTP.sys

Windows Hello

Windows Installer

Windows Kerberos

Windows Kernel

Windows Kernel Memory

Windows LUAFV

Windows Local Security Authority Subsystem Service (LSASS)

Windows Management Services

Windows OLE

Windows Print Spooler Components

Windows Projected File System

Windows RPC API

Windows Recovery Environment Agent

Windows Redirected Drive Buffering

Windows Remote Desktop

Windows Remote Desktop Licensing Service

Windows Remote Procedure Call

Windows SSDP Service

Windows Sensor Data Service

Windows Snipping Tool

Windows Speech Brokered Api

Windows Storage Spaces Controller

Windows TCP/IP

Windows TDI Translation Driver (tdx.sys)

Windows USB Print Driver

Windows Universal Plug and Play (UPnP) Device Host

Windows User Interface Core

Windows User Interface Core

Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys)

Windows WalletService

Windows Win32K - GRFX

Windows Win32K - ICOMP

[建議措施:]

目前微軟官方已針對弱點釋出修復版本，請各機關可聯絡系統維護廠商或參考以下連結： https://msrc.microsoft.com/update-guide/releaseNote/2026-Apr

[參考資料:]
1. https://msrc.microsoft.com/update-guide/releaseNote/2026-Apr

(此通報僅在於告知相關資訊，並非為資安事件)，如果您對此通報的內容有疑問或有關於此事件的建議，歡迎與我們連絡。

教育機構資安通報應變小組
網址：https://info.cert.tanet.edu.tw/
專線電話：07-5250211
網路電話：98400000
E-Mail：service@cert.tanet.edu.tw