Google Chrome 多個漏洞

發佈日期: 2026年08月21日

於 Google Chrome 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發權限提升、繞過保安限制及遠端執行任意程式碼。

---

影響

• 遠端執行程式碼
• 權限提升
• 繞過保安限制

---

受影響之系統或技術

• Google Chrome 151.0.7922.173 (Android) 之前的版本
• Google Chrome 151.0.7922.173 (Linux) 之前的版本
• Google Chrome 151.0.7922.173/.174 (Mac) 之前的版本
• Google Chrome 151.0.7922.173/.174 (Windows) 之前的版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝軟件供應商提供的修補程式：

• 更新至 151.0.7922.173 (Android) 或之後版本
• 更新至 151.0.7922.173 (Linux) 或之後版本
• 更新至 151.0.7922.173/.174 (Mac) 或之後版本
• 更新至 151.0.7922.173/.174 (Windows) 或之後版本

---

漏洞識別碼

• CVE-2026-76017
• CVE-2026-76018
• CVE-2026-76019
• CVE-2026-76020
• CVE-2026-76021
• CVE-2026-76022
• CVE-2026-76023

---

資料來源

• Google Chrome

---

相關連結

• https://chromereleases.googleblog.com/2026/08/chrome-for-android-update_0418479132.html
• https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0404570826.html

Google Chrome Multiple Vulnerabilities

Release Date: 21 Aug 2026

Multiple vulnerabilities were identified in Google Chrome. A remote attacker could exploit some of these vulnerabilities to trigger elevation of privilege, security restriction bypass and remote code execution on the targeted system.

---

Impact

• Remote Code Execution
• Elevation of Privilege
• Security Restriction Bypass

---

System / Technologies affected

• Google Chrome prior to 151.0.7922.173 (Android)
• Google Chrome prior to 151.0.7922.173 (Linux)
• Google Chrome prior to 151.0.7922.173/.174 (Mac)
• Google Chrome prior to 151.0.7922.173/.174 (Windows)

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to version 151.0.7922.173 (Android) or later
• Update to version 151.0.7922.173 (Linux) or later
• Update to version 151.0.7922.173/.174 (Mac) or later
• Update to version 151.0.7922.173/.174 (Windows) or later

---

Vulnerability Identifier

• CVE-2026-76017
• CVE-2026-76018
• CVE-2026-76019
• CVE-2026-76020
• CVE-2026-76021
• CVE-2026-76022
• CVE-2026-76023

---

Source

• Google Chrome

---

Related Link

• https://chromereleases.googleblog.com/2026/08/chrome-for-android-update_0418479132.html
• https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0404570826.html

Splunk 產品多個漏洞

發佈日期: 2026年08月20日

於 Splunk 產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發跨網站指令碼、阻斷服務狀況、權限提升、繞過保安限制、敏感資料洩露及遠端執行任意程式碼。

---

影響

• 遠端執行程式碼
• 阻斷服務
• 資料洩露
• 權限提升
• 繞過保安限制
• 跨網站指令碼

---

受影響之系統或技術

• Splunk Enterprise 9.4 版本 9.4.0 至 9.4.13
• Splunk Enterprise 10.0 版本 10.0.0 至 10.0.8
• Splunk Enterprise 10.2 版本 10.2.0 至 10.2.5
• Splunk Enterprise 10.4 版本 10.4.0 至 10.4.1

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

• https://advisory.splunk.com/advisories/SVD-2026-0801

---

漏洞識別碼

• CVE-2026-76251
• CVE-2026-76252
• CVE-2026-76253
• CVE-2026-76254
• CVE-2026-76255
• CVE-2026-76256
• CVE-2026-76257
• CVE-2026-76258
• CVE-2026-76259
• CVE-2026-76260
• CVE-2026-76261
• CVE-2026-76262
• CVE-2026-76263
• CVE-2026-76309
• CVE-2026-76310
• CVE-2026-76311
• CVE-2026-76312
• CVE-2026-76313
• CVE-2026-76314
• CVE-2026-76315
• CVE-2026-76316
• CVE-2026-76317
• CVE-2026-76318
• CVE-2026-76319
• CVE-2026-76320
• CVE-2026-76321
• CVE-2026-76322
• CVE-2026-76323
• CVE-2026-76324
• CVE-2026-76325
• CVE-2026-76326
• CVE-2026-76327
• CVE-2026-76328
• CVE-2026-76329
• CVE-2026-76330
• CVE-2026-76331
• CVE-2026-76332
• CVE-2026-76333
• CVE-2026-76334
• CVE-2026-76335
• CVE-2026-76336
• CVE-2026-76337
• CVE-2026-76338
• CVE-2026-76339
• CVE-2026-76340
• CVE-2026-76341
• CVE-2026-76342
• CVE-2026-76343
• CVE-2026-76344
• CVE-2026-76345
• CVE-2026-76346
• CVE-2026-76347
• CVE-2026-76348
• CVE-2026-76349
• CVE-2026-76350
• CVE-2026-76351
• CVE-2026-76352
• CVE-2026-76353
• CVE-2026-76354
• CVE-2026-76355

---

資料來源

• Splunk

---

相關連結

• https://advisory.splunk.com/advisories/SVD-2026-0801

Splunk Products Multiple Vulnerabilities

Release Date: 20 Aug 2026

Multiple vulnerabilities were identified in Splunk products. A remote attacker could exploit some of these vulnerabilities to trigger cross-site scripting, denial of service condition, elevation of privilege, security restriction bypass, sensitive information disclosure and remote code execution on the targeted system.

---

Impact

• Remote Code Execution
• Denial of Service
• Information Disclosure
• Elevation of Privilege
• Security Restriction Bypass
• Cross-Site Scripting

---

System / Technologies affected

• Splunk Enterprise 9.4 versions 9.4.0 to 9.4.13
• Splunk Enterprise 10.0 versions 10.0.0 to 10.0.8
• Splunk Enterprise 10.2 versions 10.2.0 to 10.2.5
• Splunk Enterprise 10.4 versions 10.4.0 to 10.4.1

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://advisory.splunk.com/advisories/SVD-2026-0801

---

Vulnerability Identifier

• CVE-2026-76251
• CVE-2026-76252
• CVE-2026-76253
• CVE-2026-76254
• CVE-2026-76255
• CVE-2026-76256
• CVE-2026-76257
• CVE-2026-76258
• CVE-2026-76259
• CVE-2026-76260
• CVE-2026-76261
• CVE-2026-76262
• CVE-2026-76263
• CVE-2026-76309
• CVE-2026-76310
• CVE-2026-76311
• CVE-2026-76312
• CVE-2026-76313
• CVE-2026-76314
• CVE-2026-76315
• CVE-2026-76316
• CVE-2026-76317
• CVE-2026-76318
• CVE-2026-76319
• CVE-2026-76320
• CVE-2026-76321
• CVE-2026-76322
• CVE-2026-76323
• CVE-2026-76324
• CVE-2026-76325
• CVE-2026-76326
• CVE-2026-76327
• CVE-2026-76328
• CVE-2026-76329
• CVE-2026-76330
• CVE-2026-76331
• CVE-2026-76332
• CVE-2026-76333
• CVE-2026-76334
• CVE-2026-76335
• CVE-2026-76336
• CVE-2026-76337
• CVE-2026-76338
• CVE-2026-76339
• CVE-2026-76340
• CVE-2026-76341
• CVE-2026-76342
• CVE-2026-76343
• CVE-2026-76344
• CVE-2026-76345
• CVE-2026-76346
• CVE-2026-76347
• CVE-2026-76348
• CVE-2026-76349
• CVE-2026-76350
• CVE-2026-76351
• CVE-2026-76352
• CVE-2026-76353
• CVE-2026-76354
• CVE-2026-76355

---

Source

• Splunk

---

Related Link

• https://advisory.splunk.com/advisories/SVD-2026-0801

GitLab 多個漏洞

發佈日期: 2026年08月19日

於 GitLab 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發資料篡改及繞過保安限制。

---

影響

• 繞過保安限制
• 篡改

---

受影響之系統或技術

• GitLab Community Edition (CE) 19.2.4, 19.1.6, 19.0.8, 18.11.11 以前的版本
• GitLab Enterprise Edition (EE) 19.2.4, 19.1.6, 19.0.8, 18.11.11 以前的版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

• https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/

---

漏洞識別碼

• CVE-2026-19478
• CVE-2026-19650

---

資料來源

• GitLab

---

相關連結

• https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/

GitLab Multiple Vulnerabilities

Release Date: 19 Aug 2026

Multiple vulnerabilities were identified in GitLab. A remote attacker could exploit some of these vulnerabilities to trigger data manipulation and security restriction bypass on the targeted system.

---

Impact

• Security Restriction Bypass
• Data Manipulation

---

System / Technologies affected

• GitLab Community Edition (CE) versions prior to 19.2.4, 19.1.6, 19.0.8, 18.11.11
• GitLab Enterprise Edition (EE) versions prior to 19.2.4, 19.1.6, 19.0.8, 18.11.11

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/

---

Vulnerability Identifier

• CVE-2026-19478
• CVE-2026-19650

---

Source

• GitLab

---

Related Link

• https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/