Microsoft Edge 多個漏洞

發佈日期: 2026年07月20日

風險: 中度風險

類型: 用戶端 - 瀏覽器

於 Microsoft Edge 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、遠端執行任意程式碼、洩露敏感資料、資料篡改及繞過保安限制。

---

影響

• 遠端執行程式碼
• 阻斷服務
• 資料洩露
• 繞過保安限制
• 篡改

---

受影響之系統或技術

• Microsoft Edge 150.0.4078.83 之前的版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝軟件供應商提供的修補程式：

• 更新至 150.0.4078.83 或之後版本

---

漏洞識別碼

• CVE-2026-15764
• CVE-2026-15765
• CVE-2026-15766
• CVE-2026-15768
• CVE-2026-15769
• CVE-2026-15770
• CVE-2026-15771
• CVE-2026-15772
• CVE-2026-15773
• CVE-2026-15774
• CVE-2026-15775
• CVE-2026-15776
• CVE-2026-15777
• CVE-2026-15778
• CVE-2026-15899
• CVE-2026-15900
• CVE-2026-15901
• CVE-2026-15902
• CVE-2026-15903
• CVE-2026-15904
• CVE-2026-15905
• CVE-2026-57980

---

資料來源

• Microsoft Edge

---

相關連結

• https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#july-16-2026
• https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#july-17-2026
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15764
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15765
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15766
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15768
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15769
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15770
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15771
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15772
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15773
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15774
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15775
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15776
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15777
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15778
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15899
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15900
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15901
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15902
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15903
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15904
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15905
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57980

Microsoft Edge Multiple Vulnerabilities

Release Date: 20 Jul 2026

RISK: Medium Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Microsoft Edge. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, sensitive information disclosure, data manipulation and security restriction bypass on the targeted system.

---

Impact

• Remote Code Execution
• Denial of Service
• Information Disclosure
• Security Restriction Bypass
• Data Manipulation

---

System / Technologies affected

• Microsoft Edge version prior to 150.0.4078.83

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to version 150.0.4078.83 or later

---

Vulnerability Identifier

• CVE-2026-15764
• CVE-2026-15765
• CVE-2026-15766
• CVE-2026-15768
• CVE-2026-15769
• CVE-2026-15770
• CVE-2026-15771
• CVE-2026-15772
• CVE-2026-15773
• CVE-2026-15774
• CVE-2026-15775
• CVE-2026-15776
• CVE-2026-15777
• CVE-2026-15778
• CVE-2026-15899
• CVE-2026-15900
• CVE-2026-15901
• CVE-2026-15902
• CVE-2026-15903
• CVE-2026-15904
• CVE-2026-15905
• CVE-2026-57980

---

Source

• Microsoft Edge

---

Related Link

• https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#july-16-2026
• https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#july-17-2026
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15764
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15765
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15766
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15768
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15769
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15770
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15771
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15772
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15773
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15774
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15775
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15776
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15777
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15778
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15899
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15900
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15901
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15902
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15903
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15904
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15905
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57980

WordPress 多個漏洞

發佈日期: 2026年07月20日

風險: 高度風險

類型: 伺服器 - 互聯網應用伺服器

於WordPress發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發遠端執行程式碼、敏感資料洩露及資料篡改。

 

注意:

CVE-2026-63030 和 CVE-2026-60137 的概念驗證碼已被公開。攻擊者可將這些漏洞串聯利用，對運行 6.9.x 及 7.0.x 版本的 WordPress 安裝實例，實現認證前遠端程式碼執行。

---

影響

• 遠端執行程式碼
• 資料洩露
• 篡改

---

受影響之系統或技術

• WordPress 6.8
• WordPress 6.9
• WordPress 7.1

請參閱以下連結:

https://wordpress.org/news/2026/07/wordpress-7-0-2-release/

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

 

https://wordpress.org/news/2026/07/wordpress-7-0-2-release/

---

漏洞識別碼

• CVE-2026-60137
• CVE-2026-63030

---

資料來源

• WordPress

---

相關連結

• https://wordpress.org/news/2026/07/wordpress-7-0-2-release/
• https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-ff9f-jf42-662q
• https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-fpp7-x2x2-2mjf
• https://wp2shell.com/

WordPress Multiple Vulnerabilities

Release Date: 20 Jul 2026

RISK: High Risk

TYPE: Servers - Internet App Servers

Multiple vulnerabilities were identified in WordPress. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution,  sensitive information disclosure and data manipulation on the targeted system.

 

Note:

Proof-of-concept code is publicly available for CVE-2026-63030 and CVE-2026-60137. Attacker can be chained together to achieve pre-authentication remote code execution against WordPress installs running versions 6.9.x and 7.0.x.

---

Impact

• Remote Code Execution
• Information Disclosure
• Data Manipulation

---

System / Technologies affected

• WordPress 6.8
• WordPress 6.9
• WordPress 7.1

Please refer to the link below:

https://wordpress.org/news/2026/07/wordpress-7-0-2-release/

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

 

https://wordpress.org/news/2026/07/wordpress-7-0-2-release/

---

Vulnerability Identifier

• CVE-2026-60137
• CVE-2026-63030

---

Source

• WordPress

---

Related Link

• https://wordpress.org/news/2026/07/wordpress-7-0-2-release/
• https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-ff9f-jf42-662q
• https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-fpp7-x2x2-2mjf
• https://wp2shell.com/

Google Chrome 多個漏洞

發佈日期: 2026年07月17日

風險: 中度風險

類型: 用戶端 - 瀏覽器

於 Google Chrome 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、洩露敏感資料及資料篡改。

---

影響

• 阻斷服務
• 資料洩露
• 篡改

---

受影響之系統或技術

• Google Chrome 150.0.7871.128 (Linux) 之前的版本
• Google Chrome 150.0.7871.128/.129 (Mac) 之前的版本
• Google Chrome 150.0.7871.128/.129 (Windows) 之前的版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝軟件供應商提供的修補程式：

• 更新至 150.0.7871.128 (Linux) 或之後版本
• 更新至 150.0.7871.128/.129 (Mac) 或之後版本
• 更新至 150.0.7871.128/.129 (Windows) 或之後版本

---

漏洞識別碼

• CVE-2026-15899
• CVE-2026-15900
• CVE-2026-15901
• CVE-2026-15902
• CVE-2026-15903
• CVE-2026-15904
• CVE-2026-15905

---

資料來源

• Google Chrome

---

相關連結

• https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_049796704.html

Google Chrome Multiple Vulnerabilities

Release Date: 17 Jul 2026

RISK: Medium Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Google Chrome. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, sensitive information disclosure and data manipulation on the targeted system.

---

Impact

• Denial of Service
• Information Disclosure
• Data Manipulation

---

System / Technologies affected

• Google Chrome prior to 150.0.7871.128 (Linux)
• Google Chrome prior to 150.0.7871.128/.129 (Mac)
• Google Chrome prior to 150.0.7871.128/.129 (Windows)

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to version 150.0.7871.128 (Linux) or later
• Update to version 150.0.7871.128/.129 (Mac) or later
• Update to version 150.0.7871.128/.129 (Windows) or later

---

Vulnerability Identifier

• CVE-2026-15899
• CVE-2026-15900
• CVE-2026-15901
• CVE-2026-15902
• CVE-2026-15903
• CVE-2026-15904
• CVE-2026-15905

---

Source

• Google Chrome

---

Related Link

• https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_049796704.html

IBM WebSphere 產品繞過保安限制漏洞

發佈日期: 2026年07月17日

風險: 中度風險

類型: 伺服器 - 互聯網應用伺服器

於 IBM WebSphere 產品發現一個漏洞。遠端攻擊者可利用這個漏洞，於目標系統觸發繞過保安限制。

---

影響

• 繞過保安限制

---

受影響之系統或技術

• IBM WebSphere Application Server - 8.5
• IBM WebSphere Application Server - 9.0
• IBM WebSphere Application Server - Liberty - 17.0.0.3 - 26.0.0.7

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

• https://www.ibm.com/support/pages/node/7280131

---

漏洞識別碼

• CVE-2026-10842

---

資料來源

• IBM

---

相關連結

• https://www.ibm.com/support/pages/node/7280131

IBM WebSphere Products Security Restriction Bypass Vulnerability

Release Date: 17 Jul 2026

RISK: Medium Risk

TYPE: Servers - Internet App Servers

A vulnerability was identified in IBM WebSphere Products. A remote attacker could exploit this vulnerability to trigger security restriction bypass on the targeted system.

---

Impact

• Security Restriction Bypass

---

System / Technologies affected

• IBM WebSphere Application Server - 8.5
• IBM WebSphere Application Server - 9.0
• IBM WebSphere Application Server - Liberty - 17.0.0.3 - 26.0.0.7

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://www.ibm.com/support/pages/node/7280131

---

Vulnerability Identifier

• CVE-2026-10842

---

Source

• IBM

---

Related Link

• https://www.ibm.com/support/pages/node/7280131

Google Chrome 多個漏洞

發佈日期: 2026年07月16日

風險: 中度風險

類型: 用戶端 - 瀏覽器

於 Google Chrome 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、遠端執行任意程式碼及繞過保安限制。

---

影響

• 阻斷服務
• 遠端執行程式碼
• 繞過保安限制

---

受影響之系統或技術

• Google Chrome 150.0.7871.124 (Linux) 之前的版本
• Google Chrome 150.0.7871.124/.125 (Mac) 之前的版本
• Google Chrome 150.0.7871.124/.125 (Windows) 之前的版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝軟件供應商提供的修補程式：

• 更新至 150.0.7871.124 (Linux) 或之後版本
• 更新至 150.0.7871.124/.125 (Mac) 或之後版本
• 更新至 150.0.7871.124/.125 (Windows) 或之後版本

---

漏洞識別碼

• CVE-2026-15764
• CVE-2026-15765
• CVE-2026-15766
• CVE-2026-15767
• CVE-2026-15768
• CVE-2026-15769
• CVE-2026-15770
• CVE-2026-15771
• CVE-2026-15772
• CVE-2026-15773
• CVE-2026-15774
• CVE-2026-15775
• CVE-2026-15776
• CVE-2026-15777
• CVE-2026-15778

---

資料來源

• Google Chrome

---

相關連結

• https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0353146366.html

Google Chrome Multiple Vulnerabilities

Release Date: 16 Jul 2026

RISK: Medium Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Google Chrome. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution and security restriction bypass on the targeted system.

---

Impact

• Denial of Service
• Remote Code Execution
• Security Restriction Bypass

---

System / Technologies affected

• Google Chrome prior to 150.0.7871.124 (Linux)
• Google Chrome prior to 150.0.7871.124/.125 (Mac)
• Google Chrome prior to 150.0.7871.124/.125 (Windows)

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to version 150.0.7871.124 (Linux) or later
• Update to version 150.0.7871.124/.125 (Mac) or later
• Update to version 150.0.7871.124/.125 (Windows) or later

---

Vulnerability Identifier

• CVE-2026-15764
• CVE-2026-15765
• CVE-2026-15766
• CVE-2026-15767
• CVE-2026-15768
• CVE-2026-15769
• CVE-2026-15770
• CVE-2026-15771
• CVE-2026-15772
• CVE-2026-15773
• CVE-2026-15774
• CVE-2026-15775
• CVE-2026-15776
• CVE-2026-15777
• CVE-2026-15778

---

Source

• Google Chrome

---

Related Link

• https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0353146366.html

三星產品多個漏洞

發佈日期: 2026年07月16日

風險: 中度風險

類型: 操作系統 - 流動裝置及操作系統

於三星產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發繞過保安限制、敏感資料洩露、遠端執行任意程式碼及資料篡改。

---

影響

• 篡改
• 遠端執行程式碼
• 繞過保安限制
• 資料洩露

---

受影響之系統或技術

• 運行 Android  14, 15, 16 的三星產品

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

• 安裝軟件供應商提供的修補程式：
  https://security.samsungmobile.com/securityUpdate.smsb

---

漏洞識別碼

• CVE-2025-48564
• CVE-2025-48565
• CVE-2025-48566
• CVE-2026-0001
• CVE-2026-0010
• CVE-2026-0065
• CVE-2026-0084
• CVE-2026-21383
• CVE-2026-24081
• CVE-2026-24087
• CVE-2026-27280
• CVE-2026-28582
• CVE-2026-28583
• CVE-2026-28584
• CVE-2026-28585
• CVE-2026-28590
• CVE-2026-28594
• CVE-2026-28596
• CVE-2026-28599
• CVE-2026-28600
• CVE-2026-28602
• CVE-2026-28603
• CVE-2026-28606
• CVE-2026-28612
• CVE-2026-28614
• CVE-2026-28618
• CVE-2026-28623
• CVE-2026-28624
• CVE-2026-28630
• CVE-2026-28631
• CVE-2026-28632
• CVE-2026-28633
• CVE-2026-28634
• CVE-2026-28638
• CVE-2026-28639
• CVE-2026-28642
• CVE-2026-28644
• CVE-2026-28649
• CVE-2026-28650
• CVE-2026-33636

---

資料來源

• Samsung

---

相關連結

• https://security.samsungmobile.com/securityUpdate.smsb

Samsung Products Multiple Vulnerabilities

Release Date: 16 Jul 2026

RISK: Medium Risk

TYPE: Operating Systems - Mobile & Apps

Multiple vulnerabilities were identified in Samsung Products. A remote attacker could exploit some of these vulnerabilities to trigger security restriction bypass, sensitive information disclosure, remote code execution and data manipulation on the targeted system.

 

---

Impact

• Data Manipulation
• Remote Code Execution
• Security Restriction Bypass
• Information Disclosure

---

System / Technologies affected

• Samsung mobile devices running Android 14, 15, 16

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Apply fixes issued by the vendor:
  https://security.samsungmobile.com/securityUpdate.smsb

---

Vulnerability Identifier

• CVE-2025-48564
• CVE-2025-48565
• CVE-2025-48566
• CVE-2026-0001
• CVE-2026-0010
• CVE-2026-0065
• CVE-2026-0084
• CVE-2026-21383
• CVE-2026-24081
• CVE-2026-24087
• CVE-2026-27280
• CVE-2026-28582
• CVE-2026-28583
• CVE-2026-28584
• CVE-2026-28585
• CVE-2026-28590
• CVE-2026-28594
• CVE-2026-28596
• CVE-2026-28599
• CVE-2026-28600
• CVE-2026-28602
• CVE-2026-28603
• CVE-2026-28606
• CVE-2026-28612
• CVE-2026-28614
• CVE-2026-28618
• CVE-2026-28623
• CVE-2026-28624
• CVE-2026-28630
• CVE-2026-28631
• CVE-2026-28632
• CVE-2026-28633
• CVE-2026-28634
• CVE-2026-28638
• CVE-2026-28639
• CVE-2026-28642
• CVE-2026-28644
• CVE-2026-28649
• CVE-2026-28650
• CVE-2026-33636

---

Source

• Samsung

---

Related Link

• https://security.samsungmobile.com/securityUpdate.smsb

Zoom 產品多個漏洞

發佈日期: 2026年07月16日

風險: 中度風險

類型: 用戶端 - 辦公室應用

於 Zoom 產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發權限提升及繞過保安限制。

---

影響

• 權限提升
• 繞過保安限制

---

受影響之系統或技術

• Zoom Rooms for Windows 7.1.0 之前的版本
• Zoom Workplace for Windows 7.0.5 之前的版本
• Zoom Workplace VDI Client for Windows 在各自分支中低於 6.5.18, 6.6.15 和 7.0.10 的版本
• Zoom Workplace VDI plugin for Windows 在各自分支中低於 6.5.17 和 6.6.14 的版本
• Zoom Remote Control for Zoom Contact Center for Windows 7.0.0 之前的版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之官方網站，以獲得更多詳細資料。

安裝軟件供應商提供的修補程式：

 

• https://www.zoom.com/en/trust/security-bulletin/zsb-26011/
• https://www.zoom.com/en/trust/security-bulletin/zsb-26012/
• https://www.zoom.com/en/trust/security-bulletin/zsb-26013/
• https://www.zoom.com/en/trust/security-bulletin/zsb-26014/

---

漏洞識別碼

• CVE-2026-53409
• CVE-2026-53410
• CVE-2026-53411
• CVE-2026-53412

---

資料來源

• Zoom

---

相關連結

• https://www.zoom.com/en/trust/security-bulletin/zsb-26011/
• https://www.zoom.com/en/trust/security-bulletin/zsb-26012/
• https://www.zoom.com/en/trust/security-bulletin/zsb-26013/
• https://www.zoom.com/en/trust/security-bulletin/zsb-26014/

Zoom Products Multiple Vulnerabilities

Release Date: 16 Jul 2026

RISK: Medium Risk

TYPE: Clients - Productivity Products

Multiple vulnerabilities were identified in Zoom Products. A remote attacker could exploit some of these vulnerabilities to trigger elevation of privilege and security restriction bypass on the targeted system.

---

Impact

• Elevation of Privilege
• Security Restriction Bypass

---

System / Technologies affected

• Zoom Rooms for Windows before version 7.1.0
• Zoom Workplace for Windows before version 7.0.5
• Zoom Workplace VDI Client for Windows before versions 6.5.18, 6.6.15 and 7.0.10 in their respective branch
• Zoom Workplace VDI plugin for Windows before 6.5.17 and 6.6.14 in their respective branch
• Zoom Remote Control for Zoom Contact Center for Windows before version 7.0.0

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

 

• https://www.zoom.com/en/trust/security-bulletin/zsb-26011/
• https://www.zoom.com/en/trust/security-bulletin/zsb-26012/
• https://www.zoom.com/en/trust/security-bulletin/zsb-26013/
• https://www.zoom.com/en/trust/security-bulletin/zsb-26014/

---

Vulnerability Identifier

• CVE-2026-53409
• CVE-2026-53410
• CVE-2026-53411
• CVE-2026-53412

---

Source

• Zoom

---

Related Link

• https://www.zoom.com/en/trust/security-bulletin/zsb-26011/
• https://www.zoom.com/en/trust/security-bulletin/zsb-26012/
• https://www.zoom.com/en/trust/security-bulletin/zsb-26013/
• https://www.zoom.com/en/trust/security-bulletin/zsb-26014/

Mozilla 產品多個漏洞

發佈日期: 2026年07月15日

風險: 高度風險

類型: 用戶端 - 瀏覽器

於 Mozilla 產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、遠端執行任意程式碼、繞過保安限制及資料篡改。

 

注意：

CVE-2026-15718 及 CVE-2026-15719 的漏洞利用程式碼已公開。CVE-2026-15718 是 Firefox JavaScript WebAssembly 元件中的無效記憶體指標漏洞。CVE-2026-15719 則影響 Firefox DOM 導覽元件的網站隔離功能。因此，此漏洞的風險等級被評為高度風險。

---

影響

• 阻斷服務
• 遠端執行程式碼
• 繞過保安限制
• 篡改

---

受影響之系統或技術

以下版本之前的版本﹕

 

• Firefox 152.0.6
• Firefox for iOS 152.4

---

解決方案

在安裝軟體之前，請先瀏覽供應商之官方網站，以獲得更多詳細資料。

更新至版本:

 

• Firefox 152.0.6
• Firefox for iOS 152.4

---

漏洞識別碼

• CVE-2026-14906
• CVE-2026-15718
• CVE-2026-15719

---

資料來源

• Mozilla

---

相關連結

• https://www.mozilla.org/en-US/security/advisories/mfsa2026-66/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-67/

Mozilla Products Multiple Vulnerabilities

Release Date: 15 Jul 2026

RISK: High Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Mozilla Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, security restriction bypass and data manipulation on the targeted system.

 

Note:

Exploit code for CVE-2026-15718 and CVE-2026-15719 is public. For CVE-2026-15718, it is an invalid memory pointer in WebAssembly flaw in Firefox’s JavaScript WebAssembly component. For CVE-2026-15719, it affects site isolation in Firefox’s DOM navigation component. Hence, the risk level is rated as High Risk.

 

 

---

Impact

• Denial of Service
• Remote Code Execution
• Security Restriction Bypass
• Data Manipulation

---

System / Technologies affected

Versions prior to:

 

• Firefox 152.0.6
• Firefox for iOS 152.4

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

 

• Firefox 152.0.6
• Firefox for iOS 152.4

---

Vulnerability Identifier

• CVE-2026-14906
• CVE-2026-15718
• CVE-2026-15719

---

Source

• Mozilla

---

Related Link

• https://www.mozilla.org/en-US/security/advisories/mfsa2026-66/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-67/

Adobe 每月保安更新 (2026年7月)

發佈日期: 2026年07月15日

風險: 中度風險

類型: 用戶端 - 辦公室應用

Adobe已為產品提供本月保安更新：

 

受影響產品	風險程度	影響	備註	詳情（包括 CVE）
Adobe Audition	中度風險	遠端執行程式碼		APSB26-71
Adobe Media Encoder	中度風險	遠端執行程式碼		APSB26-72
Adobe Commerce	中度風險	權限提升 遠端執行程式碼 跨網站指令碼 繞過保安限制		APSB26-73
Adobe Experience Manager	中度風險	遠端執行程式碼 繞過保安限制 資料洩露 跨網站指令碼 權限提升		APSB26-74
Adobe Premiere Pro	中度風險	遠端執行程式碼 繞過保安限制		APSB26-76
Adobe Creative Cloud Desktop Application	中度風險	權限提升		APSB26-77
Adobe After Effects	中度風險	遠端執行程式碼		APSB26-78
Adobe Illustrator	中度風險	權限提升 遠端執行程式碼		APSB26-79
Content Credentials SDK	中度風險	權限提升 阻斷服務 遠端執行程式碼 繞過保安限制 資料洩露		APSB26-80
Adobe Bridge	中度風險	遠端執行程式碼		APSB26-81
Adobe ColdFusion	中度風險	遠端執行程式碼 權限提升 跨網站指令碼 繞過保安限制 資料洩露		APSB26-82
Adobe Animate	中度風險	遠端執行程式碼		APSB26-83

 

「極高度風險」產品數目：0

「高度風險」產品數目：0

「中度風險」產品數目：12

「低度風險」產品數目：0

整體「風險程度」評估：中度風險

---

影響

• 遠端執行程式碼
• 阻斷服務
• 權限提升
• 資料洩露
• 繞過保安限制
• 跨網站指令碼

---

受影響之系統或技術

• Adobe Animate 2023 23.0.15 及以前版本
• Adobe Animate 2024 24.0.13 及以前版本
• Adobe Bridge 15.1.5 (LTS) 及以前版本
• Adobe Bridge 16.0.3 及以前版本
• Adobe Commerce 2.4.9
• Adobe Commerce 2.4.8-p5 及以前版本
• Adobe Commerce 2.4.7-p10 及以前版本
• Adobe Commerce 2.4.6-p15 及以前版本
• Adobe Commerce 2.4.5-p17 及以前版本
• Adobe Commerce 2.4.4-p18 及以前版本
• Adobe Commerce B2B 1.5.3
• Adobe Commerce B2B 1.5.2-p5 及以前版本
• Adobe Commerce B2B 1.4.2-p10 及以前版本
• Adobe Commerce B2B 1.3.4-p17 及以前版本
• Adobe Commerce B2B 1.3.3-p18 及以前版本
• Adobe Commerce Events 1.6.0 to 1.20.0
• Adobe Experience Manager (AEM) 6.5 Service Pack 24 及以前版本
• Adobe Experience Manager (AEM) AEM Cloud Service (CS) Release 2026.5.0 及以前版本
• Adobe Experience Manager (AEM) 6.5 LTS Service Pack 1 及以前版本
• Adobe After Effects 25.6.5 及以前版本 
• Adobe After Effects 26.2.1 及以前版本 
• Adobe Audition 26.0 及以前版本        
• Adobe Audition 25.6.4 及以前版本        
• Adobe Media Encoder 26.2.2 及以前版本
• Adobe Media Encoder 25.6.5 及以前版本
• Adobe Premiere Pro 25.6.5 及以前版本
• Adobe Premiere 26.2.2 及以前版本
• ColdFusion 2023 Update 21 及以前版本
• ColdFusion 2025 Update 10 及以前版本
• Content Credentials Command-Line Tool c2patool-v0.17.0 及以前版本
• Content Credentials JS SDK @contentauth/c2pa-web@0.7.0 及以前版本
• Content Credentials Rust SDK c2pa-v0.84.0 及以前版本
• Creative Cloud Desktop Application  6.9.1.1 及以前版本
• Illustrator 2025 29.8.7 及以前版本
• Illustrator 2026 30.5 及以前版本
• Magento Open Source 2.4.9
• Magento Open Source 2.4.8-p5 及以前版本
• Magento Open Source 2.4.7-p10 及以前版本
• Magento Open Source 2.4.6-p15 及以前版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

• 安裝供應商提供的修補程式。個別產品詳情可參考上表「詳情」一欄或執行軟件更新。

---

漏洞識別碼

• https://www.cvedetails.com/vulnerability-list.php?vendor_id=53&year=2026&month=07

---

資料來源

• Adobe

---

相關連結

• https://helpx.adobe.com/security.html/security/security-bulletin.html

Adobe Monthly Security Update (July 2026)

Release Date: 15 Jul 2026

RISK: Medium Risk

TYPE: Clients - Productivity Products

Adobe has released monthly security update for their products:

 

Vulnerable Product	Risk Level	Impacts	Notes	Details (including CVE)
Adobe Audition	Medium Risk	Remote Code Execution		APSB26-71
Adobe Media Encoder	Medium Risk	Remote Code Execution		APSB26-72
Adobe Commerce	Medium Risk	Elevation of Privilege Remote Code Execution Cross-site Scripting Security Restriction Bypass		APSB26-73
Adobe Experience Manager	Medium Risk	Remote Code Execution Security Restriction Bypass Information Disclosure Cross-site Scripting Elevation of Privilege		APSB26-74
Adobe Premiere Pro	Medium Risk	Remote Code Execution Security Restriction Bypass		APSB26-76
Adobe Creative Cloud Desktop Application	Medium Risk	Elevation of Privilege		APSB26-77
Adobe After Effects	Medium Risk	Remote Code Execution		APSB26-78
Adobe Illustrator	Medium Risk	Elevation of Privilege Remote Code Execution		APSB26-79
Content Credentials SDK	Medium Risk	Elevation of Privilege Denial of Service Remote Code Execution Security Restriction Bypass Information Disclosure		APSB26-80
Adobe Bridge	Medium Risk	Remote Code Execution		APSB26-81
Adobe ColdFusion	Medium Risk	Remote Code Execution Elevation of Privilege Cross-site Scripting Security Restriction Bypass Information Disclosure		APSB26-82
Adobe Animate	Medium Risk	Remote Code Execution		APSB26-83

 

Number of 'Extremely High Risk' product(s): 0

Number of 'High Risk' product(s): 0

Number of 'Medium Risk' product(s): 12

Number of 'Low Risk' product(s): 0

Evaluation of overall 'Risk Level': Medium Risk

---

Impact

• Remote Code Execution
• Denial of Service
• Elevation of Privilege
• Information Disclosure
• Security Restriction Bypass
• Cross-Site Scripting

---

System / Technologies affected

• Adobe Animate 2023 23.0.15 and earlier versions
• Adobe Animate 2024 24.0.13 and earlier versions
• Adobe Bridge 15.1.5 (LTS) and earlier versions
• Adobe Bridge 16.0.3 and earlier versions
• Adobe Commerce 2.4.9
• Adobe Commerce 2.4.8-p5 and earlier versions
• Adobe Commerce 2.4.7-p10 and earlier versions
• Adobe Commerce 2.4.6-p15 and earlier versions
• Adobe Commerce 2.4.5-p17 and earlier versions
• Adobe Commerce 2.4.4-p18 and earlier versions
• Adobe Commerce B2B 1.5.3
• Adobe Commerce B2B 1.5.2-p5 and earlier versions
• Adobe Commerce B2B 1.4.2-p10 and earlier versions
• Adobe Commerce B2B 1.3.4-p17 and earlier versions
• Adobe Commerce B2B 1.3.3-p18 and earlier versions
• Adobe Commerce Events 1.6.0 to 1.20.0
• Adobe Experience Manager (AEM) 6.5 Service Pack 24 and earlier versions
• Adobe Experience Manager (AEM) AEM Cloud Service (CS) Release 2026.5.0 and earlier versions
• Adobe Experience Manager (AEM) 6.5 LTS Service Pack 1 and earlier versions
• Adobe After Effects 25.6.5 and earlier versions     
• Adobe After Effects 26.2.1 and earlier versions     
• Adobe Audition 26.0 and earlier versions        
• Adobe Audition 25.6.4 and earlier versions        
• Adobe Media Encoder 26.2.2 and earlier versions
• Adobe Media Encoder 25.6.5 and earlier versions
• Adobe Premiere Pro 25.6.5 and earlier versions
• Adobe Premiere 26.2.2 and earlier versions
• ColdFusion 2023 Update 21 and earlier versions
• ColdFusion 2025 Update 10 and earlier versions
• Content Credentials Command-Line Tool c2patool-v0.17.0 and earlier versions
• Content Credentials JS SDK @contentauth/c2pa-web@0.7.0 and earlier versions
• Content Credentials Rust SDK c2pa-v0.84.0 and earlier versions
• Creative Cloud Desktop Application 6.9.1.1 and earlier versions
• Illustrator 2025 29.8.7 and earlier versions
• Illustrator 2026 30.5 and earlier versions
• Magento Open Source 2.4.9
• Magento Open Source 2.4.8-p5 and earlier versions
• Magento Open Source 2.4.7-p10 and earlier versions
• Magento Open Source 2.4.6-p15 and earlier versions

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Apply fixes issued by the vendor. Please refer to 'Details' column in the above table for details of individual product update or run software update.

---

Vulnerability Identifier

• https://www.cvedetails.com/vulnerability-list.php?vendor_id=53&year=2026&month=07

---

Source

• Adobe

---

Related Link

• https://helpx.adobe.com/security.html/security/security-bulletin.html

微軟每月保安更新 (2026年7月)

發佈日期: 2026年07月15日

風險: 高度風險

類型: 操作系統 - 視窗操作系統

微軟已為產品提供本月保安更新：

 

受影響產品	風險程度	影響	備註
Apps	中度風險	遠端執行程式碼 權限提升 仿冒
視窗	中度風險	權限提升 資料洩露 遠端執行程式碼 篡改 阻斷服務 繞過保安限制 仿冒	CVE-2026-56155 正在被廣泛利用。Active Directory 聯合身分驗證服務 (AD FS) 的存取控制權限劃分不夠精細，導致已授權的攻擊者能藉此在本地端提升權限。因此，該漏洞的風險等級被評定為中度風險。
延伸安全性更新 (ESU)	中度風險	權限提升 資料洩露 遠端執行程式碼 篡改 阻斷服務 繞過保安限制 仿冒	CVE-2026-56155 正在被廣泛利用。Active Directory 聯合身分驗證服務 (AD FS) 的存取控制權限劃分不夠精細，導致已授權的攻擊者能藉此在本地端提升權限。因此，該漏洞的風險等級被評定為中度風險。
SQL Server	中度風險	權限提升 遠端執行程式碼 仿冒 資料洩露
Azure	中度風險	權限提升 阻斷服務
Server Software	中度風險	權限提升 遠端執行程式碼 仿冒
開發者工具	中度風險	權限提升 阻斷服務 資料洩露 繞過保安限制 遠端執行程式碼 篡改 仿冒
其他	中度風險	遠端執行程式碼 篡改
System Center	中度風險	遠端執行程式碼 權限提升 資料洩露
微軟 Office	高度風險	仿冒 遠端執行程式碼 資料洩露 權限提升 繞過保安限制	CVE-2026-56164 正在被廣泛利用。Microsoft Office SharePoint 針對關鍵功能的身份驗證缺失，導致未經授權的攻擊者能透過網路提升權限。因此，該漏洞的風險等級被評定為高度風險。
Device	中度風險	權限提升
微軟 Dynamics	中度風險	遠端執行程式碼
開源軟件	中度風險	權限提升 篡改

 

「極高度風險」產品數目：0

「高度風險」產品數目：1

「中度風險」產品數目：12

「低度風險」產品數目：0

整體「風險程度」評估：高度風險

---

影響

• 遠端執行程式碼
• 阻斷服務
• 權限提升
• 繞過保安限制
• 資料洩露
• 篡改
• 仿冒

---

受影響之系統或技術

• Apps
• 視窗
• 延伸安全性更新 (ESU)
• SQL Server
• Azure
• Server Software
• 開發者工具
• 其他
• System Center
• 微軟 Office
• Device
• 微軟 Dynamics
• 開源軟件

---

解決方案

在安裝軟體之前，請先瀏覽軟體供應商之網站，以獲得更多詳細資料。

• 安裝軟件供應商提供的修補程式。

---

漏洞識別碼

• https://www.cvedetails.com/vulnerability-list.php?vendor_id=26&year=2026&month=07

---

資料來源

• Microsoft

---

相關連結

• https://msrc.microsoft.com/update-guide/releaseNote/2026-Jul

Microsoft Monthly Security Update (July 2026)

Release Date: 15 Jul 2026

RISK: High Risk

TYPE: Operating Systems - Windows OS

Microsoft has released monthly security update for their products:

 

Vulnerable Product	Risk Level	Impacts	Notes
Apps	Medium Risk	Remote Code Execution Elevation of Privilege Spoofing
Windows	Medium Risk	Elevation of Privilege Information Disclosure Remote Code Execution Data Manipulation Denial of Service Security Restriction Bypass Spoofing	CVE-2026-56155 is being exploited in the wild. Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally. Hence, the risk level of this vulnerability is rated as Medium Risk.
Extended Security Updates (ESU)	Medium Risk	Elevation of Privilege Information Disclosure Remote Code Execution Data Manipulation Denial of Service Security Restriction Bypass Spoofing	CVE-2026-56155 is being exploited in the wild. Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally. Hence, the risk level of this vulnerability is rated as Medium Risk.
SQL Server	Medium Risk	Elevation of Privilege Remote Code Execution Spoofing Information Disclosure
Azure	Medium Risk	Elevation of Privilege Denial of Service
Server Software	Medium Risk	Elevation of Privilege Remote Code Execution Spoofing
Developer Tools	Medium Risk	Elevation of Privilege Denial of Service Information Disclosure Security Restriction Bypass Remote Code Execution Data Manipulation Spoofing
Other	Medium Risk	Remote Code Execution Data Manipulation
System Center	Medium Risk	Remote Code Execution Elevation of Privilege Information Disclosure
Microsoft Office	High Risk	Spoofing Remote Code Execution Information Disclosure Elevation of Privilege Security Restriction Bypass	CVE-2026-56164 is being exploited in the wild. Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. Hence, the risk level of this vulnerability is rated as High Risk.
Device	Medium Risk	Elevation of Privilege
Microsoft Dynamics	Medium Risk	Remote Code Execution
Open Source Software	Medium Risk	Elevation of Privilege Data Manipulation

 

Number of 'Extremely High Risk' product(s): 0

Number of 'High Risk' product(s): 1

Number of 'Medium Risk' product(s): 12

Number of 'Low Risk' product(s): 0

Evaluation of overall 'Risk Level': High Risk

---

Impact

• Remote Code Execution
• Denial of Service
• Elevation of Privilege
• Security Restriction Bypass
• Information Disclosure
• Data Manipulation
• Spoofing

---

System / Technologies affected

• Apps
• Windows
• Extended Security Updates (ESU)
• SQL Server
• Azure
• Server Software
• Developer Tools
• Other
• System Center
• Microsoft Office
• Device
• Microsoft Dynamics
• Open Source Software

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

•  Apply fixes issued by the vendor.

---

Vulnerability Identifier

• https://www.cvedetails.com/vulnerability-list.php?vendor_id=26&year=2026&month=07

---

Source

• Microsoft

---

Related Link

• https://msrc.microsoft.com/update-guide/releaseNote/2026-Jul