Microsoft Edge 多個漏洞

發佈日期: 2026年08月17日

於 Microsoft Edge 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況及遠端執行任意程式碼。

---

影響

• 遠端執行程式碼
• 阻斷服務

---

受影響之系統或技術

• Microsoft Edge 151.0.4129.86 之前的版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝軟件供應商提供的修補程式：

• 更新至 151.0.4129.86 或之後版本

---

漏洞識別碼

• CVE-2026-19556
• CVE-2026-19557
• CVE-2026-19558
• CVE-2026-19559
• CVE-2026-19560
• CVE-2026-72970

---

資料來源

• Microsoft Edge

---

相關連結

• https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#Aug-14-2026
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19556
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19557
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19558
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19559
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19560
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72970

Microsoft Edge Multiple Vulnerabilities

Release Date: 17 Aug 2026

Multiple vulnerabilities were identified in Microsoft Edge. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and remote code execution on the targeted system.

---

Impact

• Remote Code Execution
• Denial of Service

---

System / Technologies affected

• Microsoft Edge version prior to 151.0.4129.86

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to version 151.0.4129.86 or later

---

Vulnerability Identifier

• CVE-2026-19556
• CVE-2026-19557
• CVE-2026-19558
• CVE-2026-19559
• CVE-2026-19560
• CVE-2026-72970

---

Source

• Microsoft Edge

---

Related Link

• https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#Aug-14-2026
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19556
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19557
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19558
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19559
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19560
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72970

Palo Alto 產品多個漏洞

發佈日期: 2026年08月14日

於 Palo Alto 產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發權限提升、繞過保安限制、敏感資料洩露、遠端執行任意程式碼及資料篡改。

---

影響

• 資料洩露
• 遠端執行程式碼
• 篡改
• 權限提升
• 繞過保安限制

---

受影響之系統或技術

• Cloud NGFW AWS 上的所有版本
• Cloud NGFW Azure 上的所有版本
• GlobalProtect App 6.0 中 6.0.15 之前的版本（Android）
• GlobalProtect App 6.0 中 6.0.15 之前的版本（Chrome OS）
• GlobalProtect App 6.0 中 6.0.15 之前的版本（iOS）
• GlobalProtect App 6.0 中 6.0.15 之前的版本（Linux）
• GlobalProtect App 6.0 中 6.0.15 之前的版本（macOS）
• GlobalProtect App 6.0 中 6.0.15 之前的版本（Windows）
• GlobalProtect App 6.2 Linux 上的所有版本
• GlobalProtect App 6.2 中 6.2.8-h13 (6.2.8-1045) 之前的版本（macOS）
• GlobalProtect App 6.2 中 6.2.8-h13 (6.2.8-1045) 之前的版本（Windows）
• GlobalProtect App 6.3 中 6.3.5 之前的版本（Android）
• GlobalProtect App 6.3 中 6.3.5 之前的版本（Chrome OS）
• GlobalProtect App 6.3 中 6.3.5 之前的版本（iOS）
• GlobalProtect App 6.3 中 6.3.3-h15 之前的版本（Linux）
• GlobalProtect App 6.3 中 6.3.3-h14 (6.3.3-1121) 之前的版本（macOS）
• GlobalProtect App 6.3 中 6.3.3-h14 (6.3.3-1121) 之前的版本（Windows）
• PAN-OS 10.2 中 10.2.8 之前的版本
• PAN-OS 11.1 中 11.1.16-h1 之前的版本
• Prisma Access 10.2 中 10.2.10 之前的版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

• https://security.paloaltonetworks.com/
• https://security.paloaltonetworks.com/CVE-2026-0279/
• https://security.paloaltonetworks.com/CVE-2026-0280/
• https://security.paloaltonetworks.com/CVE-2026-0281/
• https://security.paloaltonetworks.com/CVE-2026-0282/
• https://security.paloaltonetworks.com/CVE-2026-0283/
• https://security.paloaltonetworks.com/CVE-2026-0284/
• https://security.paloaltonetworks.com/CVE-2026-0285/
• https://security.paloaltonetworks.com/CVE-2026-0286/
• https://security.paloaltonetworks.com/CVE-2026-0287/
• https://security.paloaltonetworks.com/CVE-2026-0288/

---

漏洞識別碼

• CVE-2026-0295
• CVE-2026-0296
• CVE-2026-0297
• CVE-2026-0298
• CVE-2026-0299
• CVE-2026-0301

---

資料來源

• Palo Alto

---

相關連結

• https://security.paloaltonetworks.com/
• https://security.paloaltonetworks.com/CVE-2026-0301/
• https://security.paloaltonetworks.com/CVE-2026-0297/
• https://security.paloaltonetworks.com/CVE-2026-0296/
• https://security.paloaltonetworks.com/CVE-2026-0299/
• https://security.paloaltonetworks.com/CVE-2026-0298/
• https://security.paloaltonetworks.com/CVE-2026-0295/

Palo Alto Products Multiple Vulnerabilities

Release Date: 14 Aug 2026

Multiple vulnerabilities were identified in Palo Alto Products. A remote attacker could exploit some of these vulnerabilities to trigger elevation of privilege, security restriction bypass, sensitive information disclosure, remote code execution and data manipulation on the targeted system.

---

Impact

• Information Disclosure
• Remote Code Execution
• Data Manipulation
• Elevation of Privilege
• Security Restriction Bypass

---

System / Technologies affected

• Cloud NGFW All versions on AWS
• Cloud NGFW All versions on Azure
• GlobalProtect App 6.0 versions earlier than 6.0.15 on Android
• GlobalProtect App 6.0 versions earlier than 6.0.15 on Chrome OS
• GlobalProtect App 6.0 versions earlier than 6.0.15 on iOS
• GlobalProtect App 6.0 versions earlier than 6.0.15 on Linux
• GlobalProtect App 6.0 versions earlier than 6.0.15 on macOS
• GlobalProtect App 6.0 versions earlier than 6.0.15 on Windows
• GlobalProtect App 6.2 All versions on Linux
• GlobalProtect App 6.2 versions earlier than 6.2.8-h13 (6.2.8-1045) on macOS
• GlobalProtect App 6.2 versions earlier than 6.2.8-h13 (6.2.8-1045) on Windows
• GlobalProtect App 6.3 versions earlier than 6.3.5 on Android
• GlobalProtect App 6.3 versions earlier than 6.3.5 on Chrome OS
• GlobalProtect App 6.3 versions earlier than 6.3.5 on iOS
• GlobalProtect App 6.3 versions earlier than 6.3.3-h15 on Linux
• GlobalProtect App 6.3 versions earlier than 6.3.3-h14 (6.3.3-1121) on macOS
• GlobalProtect App 6.3 versions earlier than 6.3.3-h14 (6.3.3-1121) on Windows
• PAN-OS 10.2 versions earlier than 10.2.8
• PAN-OS 11.1 versions earlier than 11.1.16-h1
• Prisma Access 10.2 versions earlier than 10.2.10

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://security.paloaltonetworks.com/CVE-2026-0301/
• https://security.paloaltonetworks.com/CVE-2026-0297/
• https://security.paloaltonetworks.com/CVE-2026-0296/
• https://security.paloaltonetworks.com/CVE-2026-0299/
• https://security.paloaltonetworks.com/CVE-2026-0298/
• https://security.paloaltonetworks.com/CVE-2026-0295/

---

Vulnerability Identifier

• CVE-2026-0295
• CVE-2026-0296
• CVE-2026-0297
• CVE-2026-0298
• CVE-2026-0299
• CVE-2026-0301

---

Source

• Palo Alto

---

Related Link

• https://security.paloaltonetworks.com/
• https://security.paloaltonetworks.com/CVE-2026-0301/
• https://security.paloaltonetworks.com/CVE-2026-0297/
• https://security.paloaltonetworks.com/CVE-2026-0296/
• https://security.paloaltonetworks.com/CVE-2026-0299/
• https://security.paloaltonetworks.com/CVE-2026-0298/
• https://security.paloaltonetworks.com/CVE-2026-0295/

VMWare 產品多個漏洞

發佈日期: 2026年08月14日

於 VMware 產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、遠端執行任意程式碼、洩露敏感資料及繞過保安限制。

 

---

影響

• 遠端執行程式碼
• 阻斷服務
• 資料洩露
• 繞過保安限制

---

受影響之系統或技術

• VMware ESX 8.0

• VMware vCenter 8.0

• VMware Workstation 25H2

• VMware Fusion 25H2

• VMware Cloud Foundation 5.x, 9.x.x.x

• VMware vSphere Foundation 9.x.x.x

• VMware Telco Cloud Platform 3.x, 4.x, 5.x

• VMware Telco Cloud Infrastructure 3.x

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

• 安裝供應商提供的修補程式：
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017

---

漏洞識別碼

• CVE-2026-41703
• CVE-2026-41709
• CVE-2026-47876
• CVE-2026-59309
• CVE-2026-59310

---

資料來源

• VMware

---

相關連結

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017

VMWare Products Multiple Vulnerabilities

Release Date: 14 Aug 2026

Multiple vulnerabilities were identified in VMware products.  A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, sensitive information disclosure and security restriction bypass on the targeted system.

---

Impact

• Remote Code Execution
• Denial of Service
• Information Disclosure
• Security Restriction Bypass

---

System / Technologies affected

• VMware ESX 8.0

• VMware vCenter 8.0

• VMware Workstation 25H2

• VMware Fusion 25H2

• VMware Cloud Foundation 5.x, 9.x.x.x

• VMware vSphere Foundation 9.x.x.x

• VMware Telco Cloud Platform 3.x, 4.x, 5.x

• VMware Telco Cloud Infrastructure 3.x

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

• Apply fixes issued by the vendor:
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017

---

Vulnerability Identifier

• CVE-2026-41703
• CVE-2026-41709
• CVE-2026-47876
• CVE-2026-59309
• CVE-2026-59310

---

Source

• VMware

---

Related Link

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017

IBM WebSphere 產品多個漏洞

發佈日期: 2026年08月13日

於 IBM WebSphere 產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、權限提升及繞過保安限制。

---

影響

• 阻斷服務
• 權限提升
• 繞過保安限制

---

受影響之系統或技術

• IBM WebSphere Application Server - Liberty 17.0.0.3 - 26.0.0.8 版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

• https://www.ibm.com/support/pages/node/7283485
• https://www.ibm.com/support/pages/node/7283488
• https://www.ibm.com/support/pages/node/7283489

---

漏洞識別碼

• CVE-2026-10571
• CVE-2026-14525
• CVE-2026-18499

---

資料來源

• IBM

---

相關連結

• https://www.ibm.com/support/pages/node/7283485
• https://www.ibm.com/support/pages/node/7283488
• https://www.ibm.com/support/pages/node/7283489

IBM WebSphere Products Multiple Vulnerabilities

Release Date: 13 Aug 2026

Multiple vulnerabilities were identified in IBM WebSphere Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege and security restriction bypass on the targeted system.

---

Impact

• Denial of Service
• Elevation of Privilege
• Security Restriction Bypass

---

System / Technologies affected

• IBM WebSphere Application Server - Liberty version 17.0.0.3 - 26.0.0.8

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://www.ibm.com/support/pages/node/7283485
• https://www.ibm.com/support/pages/node/7283488
• https://www.ibm.com/support/pages/node/7283489

---

Vulnerability Identifier

• CVE-2026-10571
• CVE-2026-14525
• CVE-2026-18499

---

Source

• IBM

---

Related Link

• https://www.ibm.com/support/pages/node/7283485
• https://www.ibm.com/support/pages/node/7283488
• https://www.ibm.com/support/pages/node/7283489