PostgreSQL 多個漏洞

發佈日期: 2026年08月10日

於 PostgreSQL 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發權限提升、遠端執行任意程式碼、阻斷服務狀況、資料篡改及洩露敏感資料。

---

影響

• 遠端執行程式碼
• 資料洩露
• 權限提升
• 阻斷服務
• 篡改

---

受影響之系統或技術

• PostgreSQL 18.4 之前的版本
• PostgreSQL 17.10 之前的版本
• PostgreSQL 16.14 之前的版本
• PostgreSQL 15.18 之前的版本
• PostgreSQL 14.23 之前的版本

---

解決方案

在安裝軟體之前，請先瀏覽軟體供應商之網站，以獲得更多詳細資料。

 

• 軟件供應商已提供修補程式：
• 升級至PostgreSQL 18.4 版本
• 升級至PostgreSQL 17.10 版本
• 升級至PostgreSQL 16.14 版本
• 升級至PostgreSQL 15.18 版本
• 升級至PostgreSQL 14.23 版本

---

漏洞識別碼

• CVE-2026-6472
• CVE-2026-6473
• CVE-2026-6474
• CVE-2026-6475
• CVE-2026-6476
• CVE-2026-6477
• CVE-2026-6478
• CVE-2026-6479
• CVE-2026-6575
• CVE-2026-6637
• CVE-2026-6638

---

資料來源

• PostgreSQL

---

相關連結

https://www.postgresql.org/about/news/postgresql-184-1710-1614-1518-and-1423-released-3297/

PostgreSQL Multiple Vulnerabilities

Release Date: 10 Aug 2026

Multiple vulnerabilities were identified in PostgreSQL. A remote attacker could exploit some of these vulnerabilities to trigger elevation of privilege, remote code execution, denial of service condition, data manipulation and sensitive information disclosure on the targeted system.

---

Impact

• Remote Code Execution
• Information Disclosure
• Elevation of Privilege
• Denial of Service
• Data Manipulation

---

System / Technologies affected

• PostgreSQL versions prior to 18.4
• PostgreSQL versions prior to 17.10
• PostgreSQL versions prior to 16.14
• PostgreSQL versions prior to 15.18
• PostgreSQL versions prior to 14.23

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

 

• The vendor has issued fixes:
• Update to PostgreSQL version 18.4
• Update to PostgreSQL version 17.10
• Update to PostgreSQL version 16.14
• Update to PostgreSQL version 15.18
• Update to PostgreSQL version 14.23

---

Vulnerability Identifier

• CVE-2026-6472
• CVE-2026-6473
• CVE-2026-6474
• CVE-2026-6475
• CVE-2026-6476
• CVE-2026-6477
• CVE-2026-6478
• CVE-2026-6479
• CVE-2026-6575
• CVE-2026-6637
• CVE-2026-6638

---

Source

• PostgreSQL

---

Related Link

https://www.postgresql.org/about/news/postgresql-184-1710-1614-1518-and-1423-released-3297/

蘋果 macOS 繞過保安限制漏洞

發佈日期: 2026年08月07日

於蘋果 macOS 發現一個漏洞。遠端攻擊者可利用此漏洞，於目標系統觸發繞過保安限制。

---

影響

• 繞過保安限制

---

受影響之系統或技術

• macOS Sequoia 15.7.9 以前的版本
• macOS Sonoma 14.8.9 以前的版本
• macOS Tahoe 26.6.1 以前的版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝供應商提供的修補程式：

 

• macOS Sequoia 15.7.9
• macOS Sonoma 14.8.9
• macOS Tahoe 26.6.1

---

漏洞識別碼

• CVE-2026-65400

---

資料來源

• Apple

---

相關連結

• https://support.apple.com/en-gb/148170
• https://support.apple.com/en-gb/148171
• https://support.apple.com/en-gb/148172

Apple macOS Security Restriction Bypass Vulnerability

Release Date: 7 Aug 2026

A vulnerability has been identified in Apple macOS. A remote attacker could exploit this vulnerability to trigger security restriction bypass on the targeted system.

---

Impact

• Security Restriction Bypass

---

System / Technologies affected

• Versions prior to macOS Sequoia 15.7.9
• Versions prior to macOS Sonoma 14.8.9
• Versions prior to macOS Tahoe 26.6.1

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

 

• macOS Sequoia 15.7.9
• macOS Sonoma 14.8.9
• macOS Tahoe 26.6.1

---

Vulnerability Identifier

• CVE-2026-65400

---

Source

• Apple

---

Related Link

• https://support.apple.com/en-gb/148170
• https://support.apple.com/en-gb/148171
• https://support.apple.com/en-gb/148172

Google Chrome 多個漏洞

發佈日期: 2026年08月07日

於 Google Chrome 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發洩露敏感資料、阻斷服務狀況、遠端執行任意程式碼、繞過保安限制及資料篡改。

---

影響

• 阻斷服務
• 篡改
• 繞過保安限制
• 遠端執行程式碼
• 資料洩露

---

受影響之系統或技術

• Google Chrome 151.0.7922.108 (Linux) 之前的版本
• Google Chrome 151.0.7922.108/.109 (Mac) 之前的版本
• Google Chrome 151.0.7922.108/.109 (Windows) 之前的版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝軟件供應商提供的修補程式：

• 更新至 151.0.7922.108 (Linux) 或之後版本
• 更新至 151.0.7922.108/.109 (Mac) 或之後版本
• 更新至 151.0.7922.108/.109 (Windows) 或之後版本

---

漏洞識別碼

• CVE-2026-19137
• CVE-2026-19138
• CVE-2026-19139
• CVE-2026-19140
• CVE-2026-19141
• CVE-2026-19142
• CVE-2026-19143
• CVE-2026-19144
• CVE-2026-19145
• CVE-2026-19146
• CVE-2026-19147
• CVE-2026-19148
• CVE-2026-19149
• CVE-2026-19150
• CVE-2026-19151
• CVE-2026-19152
• CVE-2026-19153
• CVE-2026-19154
• CVE-2026-19155
• CVE-2026-19156
• CVE-2026-19157
• CVE-2026-19158
• CVE-2026-19159
• CVE-2026-19160
• CVE-2026-19161
• CVE-2026-19162
• CVE-2026-19163
• CVE-2026-19164
• CVE-2026-19165
• CVE-2026-19166
• CVE-2026-19167
• CVE-2026-19168
• CVE-2026-19169
• CVE-2026-19170
• CVE-2026-19171
• CVE-2026-19172
• CVE-2026-19173
• CVE-2026-19174
• CVE-2026-19175
• CVE-2026-19176
• CVE-2026-19177

---

資料來源

• Google Chrome

---

相關連結

• https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities were identified in Google Chrome. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure, denial of service condition, remote code execution, security restriction bypass and data manipulation on the targeted system.

---

Impact

• Denial of Service
• Data Manipulation
• Security Restriction Bypass
• Remote Code Execution
• Information Disclosure

---

System / Technologies affected

• Google Chrome prior to 151.0.7922.108 (Linux)
• Google Chrome prior to 151.0.7922.108/.109 (Mac)
• Google Chrome prior to 151.0.7922.108/.109 (Windows)

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to version 151.0.7922.108 (Linux) or later
• Update to version 151.0.7922.108/.109 (Mac) or later
• Update to version 151.0.7922.108/.109 (Windows) or later

---

Vulnerability Identifier

• CVE-2026-19137
• CVE-2026-19138
• CVE-2026-19139
• CVE-2026-19140
• CVE-2026-19141
• CVE-2026-19142
• CVE-2026-19143
• CVE-2026-19144
• CVE-2026-19145
• CVE-2026-19146
• CVE-2026-19147
• CVE-2026-19148
• CVE-2026-19149
• CVE-2026-19150
• CVE-2026-19151
• CVE-2026-19152
• CVE-2026-19153
• CVE-2026-19154
• CVE-2026-19155
• CVE-2026-19156
• CVE-2026-19157
• CVE-2026-19158
• CVE-2026-19159
• CVE-2026-19160
• CVE-2026-19161
• CVE-2026-19162
• CVE-2026-19163
• CVE-2026-19164
• CVE-2026-19165
• CVE-2026-19166
• CVE-2026-19167
• CVE-2026-19168
• CVE-2026-19169
• CVE-2026-19170
• CVE-2026-19171
• CVE-2026-19172
• CVE-2026-19173
• CVE-2026-19174
• CVE-2026-19175
• CVE-2026-19176
• CVE-2026-19177

---

Source

• Google Chrome

---

Related Link

• https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html

思科產品多個漏洞

於思科產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況，資料篡改及繞過保安限制。

---

影響

• 阻斷服務
• 繞過保安限制
• 篡改

---

受影響之系統或技術

• Cisco IOS
• Cisco IOS XE

請參考供應商發佈的連結以了解受影響的版本：

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-dos-qdc7qx3
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xmcp-thbAr34t
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-snmp-dos-ZAqNm4MD
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-bing-MGHrFAkd
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-webui-dos-PtAODAWW

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-dos-qdc7qx3
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xmcp-thbAr34t
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-snmp-dos-ZAqNm4MD
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-bing-MGHrFAkd
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-webui-dos-PtAODAWW

---

漏洞識別碼

• CVE-2026-20124
• CVE-2026-20263
• CVE-2026-20267
• CVE-2026-20268
• CVE-2026-20269
• CVE-2026-20270
• CVE-2026-20271
• CVE-2026-20272
• CVE-2026-20273
• CVE-2026-20301
• CVE-2026-20308
• CVE-2026-20311

---

資料來源

• Cisco

---

相關連結

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-dos-qdc7qx3
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xmcp-thbAr34t
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-snmp-dos-ZAqNm4MD
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-bing-MGHrFAkd
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-webui-dos-PtAODAWW