https://newera17031.activehosted.com/index.php?action=social&chash=b5f1e8fb36cd7fbeb7988e8639ac79e9.3134&nosocial=1
https://newera17031.activehosted.com/index.php?action=social&chash=b5f1e8fb36cd7fbeb7988e8639ac79e9.3134&nosocial=1

新聞

微軟發布最新更新,修補4個零時差漏洞

2021 / 11 / 11
編輯部
微軟發布最新更新,修補4個零時差漏洞
研究人員發現Windows作業系統與應用程式存在多個安全漏洞(CVE-2021-26443、38666、42292及42321),遠端攻擊者可藉由漏洞進而執行任意程式碼。 

影響平台:
  • CVE-2021-26443
    • Windows 10 Version 1809 for x64-based Systems
    • Windows 10 Version 1909 for x64-based Systems
    • Windows 10 Version 2004 for x64-based Systems
    • Windows 10 Version 20H2 for x64-based Systems
    • Windows 10 Version 21H1 for x64-based Systems
    • Windows 11 for x64-based Systems
    • Windows Server 2019
    • Windows Server 2019 (Server Core installation)
    • Windows Server 2022
    • Windows Server 2022 (Server Core installation)
    • Windows Server, version 2004 (Server Core installation)
    • Windows Server, version 20H2 (Server Core Installation)
       
  • CVE-2021-38666:
    • Remote Desktop client for Windows Desktop
    • Windows 7 for 32-bit Systems Service Pack 1
    • Windows 7 for x64-based Systems Service Pack 1
    • Windows 8.1 for 32-bit systems
    • Windows 8.1 for x64-based systems
    • Windows RT 8.1
    • Windows 10 for 32-bit Systems
    • Windows 10 for x64-based Systems
    • Windows 10 Version 1607 for 32-bit Systems
    • Windows 10 Version 1607 for x64-based Systems
    • Windows 10 Version 1809 for 32-bit Systems
    • Windows 10 Version 1809 for ARM64-based Systems
    • Windows 10 Version 1809 for x64-based Systems
    • Windows 10 Version 1909 for 32-bit Systems
    • Windows 10 Version 1909 for ARM64-based Systems
    • Windows 10 Version 1909 for x64-based Systems
    • Windows 10 Version 2004 for 32-bit Systems
    • Windows 10 Version 2004 for ARM64-based Systems
    • Windows 10 Version 2004 for x64-based Systems
    • Windows 10 Version 20H2 for 32-bit Systems
    • Windows 10 Version 20H2 for ARM64-based Systems
    • Windows 10 Version 20H2 for x64-based Systems
    • Windows 10 Version 21H1 for 32-bit Systems
    • Windows 10 Version 21H1 for ARM64-based Systems
    • Windows 10 Version 21H1 for x64-based Systems
    • Windows 11 for ARM64-based Systems
    • Windows 11 for x64-based Systems
    • Windows Server 2008 for 32-bit Systems Service Pack 2
    • Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
    • Windows Server 2008 for x64-based Systems Service Pack 2
    • Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
    • Windows Server 2008 R2 for x64-based Systems Service Pack 1
    • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
    • Windows Server 2012
    • Windows Server 2012 (Server Core installation)
    • Windows Server 2012 R2
    • Windows Server 2012 R2 (Server Core installation)
    • Windows Server 2016
    • Windows Server 2016  (Server Core installation)
    • Windows Server 2019
    • Windows Server 2019  (Server Core installation)
    • Windows Server 2022
    • Windows Server 2022 (Server Core installation)
    • Windows Server, version 2004 (Server Core installation)
    • Windows Server, version 20H2 (Server Core Installation)
  • CVE-2021-42292:
    • Microsoft 365 Apps for Enterprise for 32-bit Systems
    • Microsoft 365 Apps for Enterprise for 64-bit Systems
    • Microsoft Excel 2013 RT Service Pack 1
    • Microsoft Excel 2013 Service Pack 1 (32-bit editions)
    • Microsoft Excel 2013 Service Pack 1 (64-bit editions)
    • Microsoft Excel 2016 (32-bit edition)
    • Microsoft Excel 2016 (64-bit edition)
    • Microsoft Office 2013 RT Service Pack 1
    • Microsoft Office 2013 Service Pack 1 (32-bit editions)
    • Microsoft Office 2013 Service Pack 1 (64-bit editions)
    • Microsoft Office 2016 (32-bit edition)
    • Microsoft Office 2016 (64-bit edition)
    • Microsoft Office 2019 for 32-bit editions
    • Microsoft Office 2019 for 64-bit editions
    • Microsoft Office 2019 for Mac
    • Microsoft Office LTSC 2021 for 32-bit editions
    • Microsoft Office LTSC 2021 for 64-bit editions
    • Microsoft Office LTSC for Mac 2021
  • CVE-2021-42321:
    • Microsoft Exchange Server 2016 Cumulative Update 21
    • Microsoft Exchange Server 2016 Cumulative Update 22
    • Microsoft Exchange Server 2019 Cumulative Update 10
    • Microsoft Exchange Server 2019 Cumulative Update 11
建議措施:

目前微軟官方已針對這些漏洞釋出更新程式,參考以下網址進行更新:
1. https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-26443
2. https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-38666
3. https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42292
4. https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42321

本文轉載自NCCST。