Google Chrome 多個漏洞

Google Chrome 多個漏洞

發佈日期: 2026年10月16日

於 Google Chrome 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況及遠端執行任意程式碼。

---

影響

• 阻斷服務
• 遠端執行程式碼

---

受影響之系統或技術

• Google Chrome 155.0.8059.84 (Linux) 之前的版本
• Google Chrome 155.0.8059.84/.85 (Mac) 之前的版本
• Google Chrome 155.0.8059.84/.85 (Windows) 之前的版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝軟件供應商提供的修補程式：

• Google Chrome 155.0.8059.84 (Linux) 或之後版本
• Google Chrome 155.0.8059.84/.85 (Mac) 或之後版本
• Google Chrome 155.0.8059.84/.85 (Windows) 或之後版本

---

漏洞識別碼

• CVE-2026-110913
• CVE-2026-110914
• CVE-2026-110915
• CVE-2026-110916
• CVE-2026-110917
• CVE-2026-110918
• CVE-2026-110919
• CVE-2026-110920
• CVE-2026-110921
• CVE-2026-110922

---

資料來源

• Google Chrome

---

相關連結

• https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01886704284.html

 

Google Chrome Multiple Vulnerabilities

Google Chrome Multiple Vulnerabilities

Release Date: 16 Oct 2026

Multiple vulnerabilities were identified in Google Chrome. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and remote code execution on the targeted system.

---

Impact

• Denial of Service
• Remote Code Execution

---

System / Technologies affected

• Google Chrome prior to 155.0.8059.84 (Linux)
• Google Chrome prior to 155.0.8059.84/.85 (Mac)
• Google Chrome prior to 155.0.8059.84/.85 (Windows)

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Google Chrome 155.0.8059.84 (Linux) or later
• Google Chrome 155.0.8059.84/.85 (Mac) or later
• Google Chrome 155.0.8059.84/.85 (Windows) or later

---

Vulnerability Identifier

• CVE-2026-110913
• CVE-2026-110914
• CVE-2026-110915
• CVE-2026-110916
• CVE-2026-110917
• CVE-2026-110918
• CVE-2026-110919
• CVE-2026-110920
• CVE-2026-110921
• CVE-2026-110922

---

Source

• Google Chrome

---

Related Link

• https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01886704284.html

 

思科 Secure Email Gateway 遠端執行程式碼漏洞

思科 Secure Email Gateway 遠端執行程式碼漏洞

發佈日期: 2026年10月15日

於思科產品發現一個漏洞。遠端攻擊者可利用這個漏洞，於目標系統觸發權限提升、遠端執行任意程式碼及資料篡改。

 

注意：

CVE-2026-76519 正被廣泛利用。此漏洞是因在啟用檔案信譽服務時，對電子郵件附件處理不當所致。未經身分驗證的遠端攻擊者可透過受影響的裝置，傳送包含特製附件的電郵以利用此漏洞。成功利用此漏洞可讓攻擊者在底層作業系統上寫入任意檔案，並以 root 權限執行指令。因此，此漏洞的風險等級被評為高度風險。

---

影響

• 遠端執行程式碼
• 篡改
• 權限提升

---

受影響之系統或技術

• Cisco Secure Email Gateway (physical and virtual appliances)

請參考供應商發佈的連結以了解受影響的版本：

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp

---

漏洞識別碼

• CVE-2026-76519

---

資料來源

• Cisco

---

相關連結

• https://www.cisa.gov/news-events/alerts/2026/10/14/cisa-adds-four-known-exploited-vulnerabilities-catalog
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp

 

Cisco Secure Email Gateway Remote Code Execution Vulnerability

Cisco Secure Email Gateway Remote Code Execution Vulnerability

Release Date: 15 Oct 2026

A vulnerability was identified in Cisco products. A remote attacker could exploit this vulnerability to trigger elevation of privilege, remote code execution and data manipulation on the targeted system.

 

Note:

CVE-2026-76519 is being exploited in the wild. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An unauthenticated, remote attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system. Hence, the risk level is rated as High Risk.

---

Impact

• Remote Code Execution
• Data Manipulation
• Elevation of Privilege

---

System / Technologies affected

• Cisco Secure Email Gateway (physical and virtual appliances)

For affected versions, please refer to the link issued by the vendor:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp

---

Vulnerability Identifier

• CVE-2026-76519

---

Source

• Cisco

---

Related Link

• https://www.cisa.gov/news-events/alerts/2026/10/14/cisa-adds-four-known-exploited-vulnerabilities-catalog
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp

 

IBM WebSphere 產品多個漏洞

IBM WebSphere 產品多個漏洞

發佈日期: 2026年10月15日

於 IBM WebSphere 產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、繞過保安限制、敏感資料洩露、仿冒及資料篡改。

---

影響

• 阻斷服務
• 篡改
• 資料洩露
• 仿冒
• 繞過保安限制

---

受影響之系統或技術

• IBM WebSphere Application Server 8.5, 9.0 版本
• IBM WebSphere Application Server - Liberty 17.0.0.3 - 26.0.0.10 版本
• IBM WebSphere Application Server - Liberty 20.0.0.12 - 26.0.0.10 版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

• https://www.ibm.com/support/pages/node/7292213
• https://www.ibm.com/support/pages/node/7292214
• https://www.ibm.com/support/pages/node/7292216
• https://www.ibm.com/support/pages/node/7292217
• https://www.ibm.com/support/pages/node/7292219
• https://www.ibm.com/support/pages/node/7292221
• https://www.ibm.com/support/pages/node/7292226
• https://www.ibm.com/support/pages/node/7292227
• https://www.ibm.com/support/pages/node/7292228
• https://www.ibm.com/support/pages/node/7292232
• https://www.ibm.com/support/pages/node/7292235
• https://www.ibm.com/support/pages/node/7292236

---

漏洞識別碼

• CVE-2026-17615
• CVE-2026-68536
• CVE-2026-76646
• CVE-2026-84375
• CVE-2026-93895
• CVE-2026-93905
• CVE-2026-93907
• CVE-2026-93909
• CVE-2026-95680
• CVE-2026-95695
• CVE-2026-95696
• CVE-2026-101294
• CVE-2026-103499
• CVE-2026-105442
• CVE-2026-105443

---

資料來源

• IBM

---

相關連結

• https://www.ibm.com/support/pages/node/7292213
• https://www.ibm.com/support/pages/node/7292214
• https://www.ibm.com/support/pages/node/7292216
• https://www.ibm.com/support/pages/node/7292217
• https://www.ibm.com/support/pages/node/7292219
• https://www.ibm.com/support/pages/node/7292221
• https://www.ibm.com/support/pages/node/7292226
• https://www.ibm.com/support/pages/node/7292227
• https://www.ibm.com/support/pages/node/7292228
• https://www.ibm.com/support/pages/node/7292232
• https://www.ibm.com/support/pages/node/7292235
• https://www.ibm.com/support/pages/node/7292236

 

IBM WebSphere Products Multiple Vulnerabilities

IBM WebSphere Products Multiple Vulnerabilities

Release Date: 15 Oct 2026

Multiple vulnerabilities were identified in IBM WebSphere Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, security restriction bypass, information disclosure, spoofing and data manipulation on the targeted system.

---

Impact

• Denial of Service
• Data Manipulation
• Information Disclosure
• Spoofing
• Security Restriction Bypass

---

System / Technologies affected

• IBM WebSphere Application Server version 8.5, 9.0
• IBM WebSphere Application Server - Liberty version 17.0.0.3 - 26.0.0.10
• IBM WebSphere Application Server - Liberty version 20.0.0.12 - 26.0.0.10

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://www.ibm.com/support/pages/node/7292213
• https://www.ibm.com/support/pages/node/7292214
• https://www.ibm.com/support/pages/node/7292216
• https://www.ibm.com/support/pages/node/7292217
• https://www.ibm.com/support/pages/node/7292219
• https://www.ibm.com/support/pages/node/7292221
• https://www.ibm.com/support/pages/node/7292226
• https://www.ibm.com/support/pages/node/7292227
• https://www.ibm.com/support/pages/node/7292228
• https://www.ibm.com/support/pages/node/7292232
• https://www.ibm.com/support/pages/node/7292235
• https://www.ibm.com/support/pages/node/7292236

---

Vulnerability Identifier

• CVE-2026-17615
• CVE-2026-68536
• CVE-2026-76646
• CVE-2026-84375
• CVE-2026-93895
• CVE-2026-93905
• CVE-2026-93907
• CVE-2026-93909
• CVE-2026-95680
• CVE-2026-95695
• CVE-2026-95696
• CVE-2026-101294
• CVE-2026-103499
• CVE-2026-105442
• CVE-2026-105443

---

Source

• IBM

---

Related Link

• https://www.ibm.com/support/pages/node/7292213
• https://www.ibm.com/support/pages/node/7292214
• https://www.ibm.com/support/pages/node/7292216
• https://www.ibm.com/support/pages/node/7292217
• https://www.ibm.com/support/pages/node/7292219
• https://www.ibm.com/support/pages/node/7292221
• https://www.ibm.com/support/pages/node/7292226
• https://www.ibm.com/support/pages/node/7292227
• https://www.ibm.com/support/pages/node/7292228
• https://www.ibm.com/support/pages/node/7292232
• https://www.ibm.com/support/pages/node/7292235
• https://www.ibm.com/support/pages/node/7292236

 

Mozilla 產品多個漏洞

Mozilla 產品多個漏洞

發佈日期: 2026年10月15日

於 Mozilla 產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、權限提升、繞過保安限制、敏感資料洩露、資料篡改及彷冒。

---

影響

• 阻斷服務
• 篡改
• 權限提升
• 繞過保安限制
• 資料洩露
• 仿冒

---

受影響之系統或技術

以下版本之前的版本﹕

 

• Firefox 158
• Firefox ESR 115.43
• Firefox ESR 153.5
• Firefox for iOS 157.1
• Thunderbird 153.5
• Thunderbird 158

---

解決方案

在安裝軟體之前，請先瀏覽供應商之官方網站，以獲得更多詳細資料。

更新至版本:

 

• Firefox 158
• Firefox ESR 115.43
• Firefox ESR 153.5
• Firefox for iOS 157.1
• Thunderbird 153.5
• Thunderbird 158

---

漏洞識別碼

• CVE-2026-0314
• CVE-2026-0315
• CVE-2026-0316
• CVE-2026-0317
• CVE-2026-0318
• CVE-2026-0319
• CVE-2026-0320
• CVE-2026-0321
• CVE-2026-0322
• CVE-2026-103417
• CVE-2026-103418
• CVE-2026-106016
• CVE-2026-109704
• CVE-2026-109705
• CVE-2026-109706
• CVE-2026-109707
• CVE-2026-109708
• CVE-2026-109709
• CVE-2026-109710
• CVE-2026-109711
• CVE-2026-109712
• CVE-2026-109713
• CVE-2026-109714
• CVE-2026-109715
• CVE-2026-109716
• CVE-2026-109717
• CVE-2026-109718
• CVE-2026-109719
• CVE-2026-109720
• CVE-2026-109721
• CVE-2026-109722
• CVE-2026-109723
• CVE-2026-109724
• CVE-2026-109725
• CVE-2026-109726
• CVE-2026-109727
• CVE-2026-109728
• CVE-2026-109729
• CVE-2026-109730
• CVE-2026-109731
• CVE-2026-109732
• CVE-2026-109733
• CVE-2026-109734
• CVE-2026-109735
• CVE-2026-109736
• CVE-2026-109737
• CVE-2026-109738
• CVE-2026-109739
• CVE-2026-109740
• CVE-2026-109741
• CVE-2026-109742
• CVE-2026-109743
• CVE-2026-109744
• CVE-2026-109745
• CVE-2026-109746
• CVE-2026-109747
• CVE-2026-109748
• CVE-2026-109749
• CVE-2026-109750
• CVE-2026-109751
• CVE-2026-109752
• CVE-2026-109753
• CVE-2026-109754
• CVE-2026-109755
• CVE-2026-109756
• CVE-2026-109757
• CVE-2026-109759
• CVE-2026-109760
• CVE-2026-109761
• CVE-2026-109762
• CVE-2026-109763
• CVE-2026-109764
• CVE-2026-109765
• CVE-2026-109766
• CVE-2026-109767
• CVE-2026-109768
• CVE-2026-109769
• CVE-2026-109770
• CVE-2026-109771
• CVE-2026-109772
• CVE-2026-109773
• CVE-2026-109774
• CVE-2026-109775
• CVE-2026-109776
• CVE-2026-109777
• CVE-2026-109778
• CVE-2026-109779
• CVE-2026-109780
• CVE-2026-109781
• CVE-2026-109782
• CVE-2026-109783
• CVE-2026-110247
• CVE-2026-110249

---

資料來源

• Mozilla

---

相關連結

• https://www.mozilla.org/en-US/security/advisories/mfsa2026-105/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-107/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-110/

 

Mozilla Products Multiple Vulnerabilities

Mozilla Products Multiple Vulnerabilities

Release Date: 15 Oct 2026

Multiple vulnerabilities were identified in Mozilla Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, security restriction bypass, sensitive information disclosure, data manipulation and spoofing on the targeted system.

---

Impact

• Denial of Service
• Data Manipulation
• Elevation of Privilege
• Security Restriction Bypass
• Information Disclosure
• Spoofing

---

System / Technologies affected

Versions prior to:

 

• Firefox 158
• Firefox ESR 115.43
• Firefox ESR 153.5
• Firefox for iOS 157.1
• Thunderbird 153.5
• Thunderbird 158

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

 

• Firefox 158
• Firefox ESR 115.43
• Firefox ESR 153.5
• Firefox for iOS 157.1
• Thunderbird 153.5
• Thunderbird 158

---

Vulnerability Identifier

• CVE-2026-0314
• CVE-2026-0315
• CVE-2026-0316
• CVE-2026-0317
• CVE-2026-0318
• CVE-2026-0319
• CVE-2026-0320
• CVE-2026-0321
• CVE-2026-0322
• CVE-2026-103417
• CVE-2026-103418
• CVE-2026-106016
• CVE-2026-109704
• CVE-2026-109705
• CVE-2026-109706
• CVE-2026-109707
• CVE-2026-109708
• CVE-2026-109709
• CVE-2026-109710
• CVE-2026-109711
• CVE-2026-109712
• CVE-2026-109713
• CVE-2026-109714
• CVE-2026-109715
• CVE-2026-109716
• CVE-2026-109717
• CVE-2026-109718
• CVE-2026-109719
• CVE-2026-109720
• CVE-2026-109721
• CVE-2026-109722
• CVE-2026-109723
• CVE-2026-109724
• CVE-2026-109725
• CVE-2026-109726
• CVE-2026-109727
• CVE-2026-109728
• CVE-2026-109729
• CVE-2026-109730
• CVE-2026-109731
• CVE-2026-109732
• CVE-2026-109733
• CVE-2026-109734
• CVE-2026-109735
• CVE-2026-109736
• CVE-2026-109737
• CVE-2026-109738
• CVE-2026-109739
• CVE-2026-109740
• CVE-2026-109741
• CVE-2026-109742
• CVE-2026-109743
• CVE-2026-109744
• CVE-2026-109745
• CVE-2026-109746
• CVE-2026-109747
• CVE-2026-109748
• CVE-2026-109749
• CVE-2026-109750
• CVE-2026-109751
• CVE-2026-109752
• CVE-2026-109753
• CVE-2026-109754
• CVE-2026-109755
• CVE-2026-109756
• CVE-2026-109757
• CVE-2026-109759
• CVE-2026-109760
• CVE-2026-109761
• CVE-2026-109762
• CVE-2026-109763
• CVE-2026-109764
• CVE-2026-109765
• CVE-2026-109766
• CVE-2026-109767
• CVE-2026-109768
• CVE-2026-109769
• CVE-2026-109770
• CVE-2026-109771
• CVE-2026-109772
• CVE-2026-109773
• CVE-2026-109774
• CVE-2026-109775
• CVE-2026-109776
• CVE-2026-109777
• CVE-2026-109778
• CVE-2026-109779
• CVE-2026-109780
• CVE-2026-109781
• CVE-2026-109782
• CVE-2026-109783
• CVE-2026-110247
• CVE-2026-110249

---

Source

• Mozilla

---

Related Link

• https://www.mozilla.org/en-US/security/advisories/mfsa2026-105/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-107/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-110/