Home
1
Hot News
2
Information Security
3
[TWCERT 分享資安情資]_Microsoft Excel存在高風險安全漏洞(CVE-2026-62870),請儘速確認並進行修補4
https://www.kjintelligent.com/en/ KJ Intelligent Corp.
KJ Intelligent Corp. 4F. 5A, No. 7, Sec. 3, New Taipei Blvd., Xinzhuang Dist., New Taipei City 242032 , Taiwan (R.O.C.)
【出處:台灣電腦緊急應變小組 TWCert】研究人員發現VMware多項產品存在3項高風險安全漏洞(CVE-2026-47876、CVE-2026-59309及CVE-2026-59310),類型分別為越界寫入(Out-of-Bounds Write)、身分鑑別繞過(Authentication Bypass)及路徑遍歷(Path Traversal),請儘速確認並進行修補。CVE-2026-47876(CVSS:9.3):已取得虛擬機器VMXNET3介面卡本機管理員權限之攻擊者,可於ESXi主機上執行任意程式碼。CVE-2026-59309(CVSS:9.8):已取得VMware vCenter網路存取權限之遠端攻擊者,可利用此漏洞於未經授權之情況下繞過身分鑑別並存取系統。CVE-2026-59310(CVSS:9.8):已取得VMware vCenter網路存取權限之遠端攻擊者,可利用此漏洞執行任意程式碼。◎建議措施:官方已針對漏洞釋出修復更新,請參考官方說明進行更新,網址如下:https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017◎相關IOC資訊:◎備註:◎參考資料:1.https://nvd.nist.gov/vuln/detail/CVE-2026-478762.https://nvd.nist.gov/vuln/detail/CVE-2026-593093.https://nvd.nist.gov/vuln/detail/CVE-2026-593104.https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 https://www.kjintelligent.com/en/hot_538241.html [TWCERT 分享資安情資]_VMware多項產品存在3項高風險安全漏洞,請儘速確認並進行修補 2026-08-12 2027-08-12
KJ Intelligent Corp. 4F. 5A, No. 7, Sec. 3, New Taipei Blvd., Xinzhuang Dist., New Taipei City 242032 , Taiwan (R.O.C.) https://www.kjintelligent.com/en/hot_538241.html
KJ Intelligent Corp. 4F. 5A, No. 7, Sec. 3, New Taipei Blvd., Xinzhuang Dist., New Taipei City 242032 , Taiwan (R.O.C.) https://www.kjintelligent.com/en/hot_538241.html
https://schema.org/EventMovedOnline https://schema.org/OfflineEventAttendanceMode
2026-08-12 http://schema.org/InStock TWD 0 https://www.kjintelligent.com/en/hot_538241.html


【出處:台灣電腦緊急應變小組 TWCert】

研究人員發現Microsoft Excel存在使用釋放後記憶體(Use After Free)漏洞(CVE-2026
-62870,CVSS:8.8),未經身分鑑別之遠端攻擊者可利用此漏洞執行任意程式碼,請儘速確認並進行
修補。
◎建議措施:
官方已針對漏洞釋出修復更新,請參考官方說明進行更新,網址如下:https://msrc.m
icrosoft.com/update-guide/vulnerability/CVE-2026-62870
◎相關IOC資訊:
◎備註:
◎參考資料:
1.https://nvd.nist.gov/vuln/detail/CVE-2026-62870
2.https://msrc.microsoft.c
om/update-guide/vulnerability/CVE-2026-62870

Previous Back to List Next