轉發 台灣電腦網路危機處理暨協調中心 資安訊息警訊 TWCERTCC-200-202605-00000014

[內容說明]
【CVE-2008-4250】Microsoft Windows Buffer Overflow Vulnerability (CVSS v3.1: 9.8)
【是否遭勒索軟體利用:未知】 Microsoft Windows的Windows Server Service中存在緩衝區溢位漏洞，遠端攻擊者可透過特製的RPC請求，在路徑正規化過程中觸發緩衝區溢位，進而執行任意程式碼。

【CVE-2009-1537】Microsoft DirectX NULL Byte Overwrite Vulnerability (CVSS v3.1: 8.8)
【是否遭勒索軟體利用:未知】 Microsoft DirectX 中的 DirectShow 元件 quartz.dll 內的 QuickTime Movie Parser Filter 存在NULL 位元組覆寫漏洞。遠端攻擊者可透過特製的QuickTime媒體檔案觸發此漏洞，進而執行任意程式碼。

【CVE-2009-3459】Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability (CVSS v3.1: 8.8)
【是否遭勒索軟體利用:未知】 Adobe Acrobat and Reader 存在堆積型緩衝區溢位漏洞。遠端攻擊者可透過特製的PDF檔案觸發記憶體損毀，進而執行任意程式碼。

【CVE-2010-0249】Microsoft Internet Explorer Use-After-Free Vulnerability (CVSS v3.1: 8.8)
【是否遭勒索軟體利用:未知】 Microsoft Internet Explorer存在使用釋放後記憶體漏洞。遠端攻擊者可透過存取與已刪除物件相關聯的指標，進而執行任意程式碼。

【CVE-2010-0806】Microsoft Internet Explorer Use-After-Free Vulnerability (CVSS v3.1: 8.8)
【是否遭勒索軟體利用:未知】 Microsoft Internet Explorer 存在使用釋放後記憶體漏洞。遠端攻擊者可透過在物件刪除後存取無效指標的方式利用此漏洞，進而執行任意程式碼。

【CVE-2026-41091】Microsoft Defender Link Following Vulnerability (CVSS v3.1: 7.8)
【是否遭勒索軟體利用:未知】 Microsoft Defender 存在連結追蹤漏洞，允許已授權的攻擊者在本機提升權限。

【CVE-2026-45498】Microsoft Defender Denial of Service Vulnerability (CVSS v3.1: 4.0)
【是否遭勒索軟體利用:未知】 Microsoft Defender 存在未明確說明的漏洞，可能導致服務阻斷。

【CVE-2025-34291】Langflow Origin Validation Error Vulnerability (CVSS v3.1: 8.8)
【是否遭勒索軟體利用:未知】 Langflow存在來源驗證錯誤漏洞。由於其CORS設定過於寬鬆，並且refresh token的cookie設定為SameSite=None，攻擊者可能藉此存取需要身份驗證的端點，進而執行任意程式碼，最終取得系統完整控制權。

【CVE-2026-34926】Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability (CVSS v3.1: 6.7)
【是否遭勒索軟體利用:未知】 Trend Micro Apex One (on-premise) 存在目錄遍歷漏洞，可能允許經預先驗證的本地攻擊者修改伺服器上的關鍵資料表，進而注入惡意程式碼並下發至受管端點設備。

【CVE-2026-9082】Drupal Core SQL Injection Vulnerability (CVSS v3.1: 9.8)
【是否遭勒索軟體利用:未知】 Drupal Core 存在SQL注入漏洞。攻擊者可透過資料庫抽象 API 發送特製請求，藉此實現權限提升及遠端程式碼執行。

[影響平台]
【CVE-2008-4250】請參考官方所列的影響版本 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067

【CVE-2009-1537】請參考官方所列的影響版本 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028

【CVE-2009-3459】請參考官方所列的影響版本 https://helpx.adobe.com/security/security-bulletin.html

【CVE-2010-0249】請參考官方所列的影響版本 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002

【CVE-2010-0806】請參考官方所列的影響版本 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018

【CVE-2026-41091】請參考官方所列的影響版本 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091

【CVE-2026-45498】請參考官方所列的影響版本 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498

【CVE-2025-34291】 Langflow 1.6.9(含)之前的版本

【CVE-2026-34926】請參考官方所列的影響版本 https://success.trendmicro.com/en-US/solution/KA-0023430

【CVE-2026-9082】請參考官方所列的影響版本 https://www.drupal.org/sa-core-2026-004

[建議措施]
【CVE-2008-4250】 官方已針對漏洞釋出修復更新，請更新至相關版本 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067

【CVE-2009-1537】 官方已針對漏洞釋出修復更新，請更新至相關版本 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028

【CVE-2009-3459】 官方已針對漏洞釋出修復更新，請更新至相關版本 https://helpx.adobe.com/security/security-bulletin.html

【CVE-2010-0249】 官方已針對漏洞釋出修復更新，請更新至相關版本 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002

【CVE-2010-0806】 官方已針對漏洞釋出修復更新，請更新至相關版本 https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018

【CVE-2026-41091】 官方已針對漏洞釋出修復更新，請更新至相關版本 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091

【CVE-2026-45498】 官方已針對漏洞釋出修復更新，請更新至相關版本 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498

【CVE-2025-34291】 對應產品升級至以下版本(或更高) Langflow 1.7.0

【CVE-2026-34926】 官方已針對漏洞釋出修復更新，請更新至相關版本 https://success.trendmicro.com/en-US/solution/KA-0023430

【CVE-2026-9082】 官方已針對漏洞釋出修復更新，請更新至相關版本 https://www.drupal.org/sa-core-2026-004
Forwarded from Taiwan Computer Network Crisis Management and Coordination Center, Cybersecurity Alert TWCERTCC-200-202605-00000014

[Content Description]
【CVE-2008-4250】Microsoft Windows Buffer Overflow Vulnerability (CVSS v3.1: 9.8)
【Exploited by Ransomware: Unknown】A buffer overflow vulnerability exists in Microsoft Windows' Windows Server Service. A remote attacker can trigger a buffer overflow during path normalization using a specially crafted RPC request, thereby executing arbitrary code.

【CVE-2009-1537】Microsoft DirectX NULL Byte Overwrite Vulnerability (CVSS v3.1: 8.8)
【Exploited by Ransomware: Unknown】A NULL byte overwrite vulnerability exists in the QuickTime Movie Parser Filter within the DirectShow component quartz.dll in Microsoft DirectX. A remote attacker could trigger this vulnerability using a specially crafted QuickTime media file, thereby executing arbitrary code.

【CVE-2009-3459】Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability (CVSS v3.1: 8.8)
【Exploited by Ransomware: Unknown】Adobe Acrobat and Reader has a heap-based buffer overflow vulnerability. A remote attacker could trigger memory corruption using a specially crafted PDF file, thereby executing arbitrary code.

【CVE-2010-0249】Microsoft Internet Explorer Use-After-Free Vulnerability (CVSS v3.1: 8.8)
【Exploited by Ransomware: Unknown】Microsoft Internet Explorer has a use-after-free memory vulnerability. A remote attacker could execute arbitrary code by accessing indicators associated with deleted objects.

【CVE-2010-0806】Microsoft Internet Explorer Use-After-Free Vulnerability (CVSS v3.1: 8.8)
【Exploited by Ransomware: Unknown】A use-after-free vulnerability exists in Microsoft Internet Explorer. A remote attacker could exploit this vulnerability by accessing invalid keys after an object is deleted, thereby executing arbitrary code.

【CVE-2026-41091】Microsoft Defender Link Following Vulnerability (CVSS v3.1: 7.8)
【Exploited by Ransomware: Unknown】A link following vulnerability exists in Microsoft Defender, allowing an authorized attacker to escalate privileges on the local machine.

【CVE-2026-45498】Microsoft Defender Denial of Service Vulnerability (CVSS v3.1: 4.0)
【Exploited by Ransomware: Unknown】An unspecified vulnerability exists in Microsoft Defender that could lead to service disruption.

【CVE-2025-34291】Langflow Origin Validation Error Vulnerability (CVSS v3.1: 8.8)
【[Exploited by Ransomware: Unknown】Langflow has an origin validation error vulnerability. Due to its overly lenient CORS settings and the refresh token cookie being set to SameSite=None, attackers could exploit this vulnerability to access authentication-required endpoints, execute arbitrary code, and ultimately gain complete system control.

【CVE-2026-34926】Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability (CVSS v3.1: 6.7)
【Exploited by Ransomware: Unknown】Trend Micro Apex One (on-premise) has a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify critical data tables on the server, inject malicious code, and distribute it to managed endpoint devices.

【CVE-2026-9082】Drupal Core SQL Injection Vulnerability (CVSS v3.1: 9.8)
【Exploitation by Ransomware: Unknown】Drupal Core contains an SQL injection vulnerability. Attackers can use the database abstraction API to send specially crafted requests, thereby achieving privilege escalation and remote code execution.

[Affected Platforms]
【CVE-2008-4250】Please refer to the official list of affected versions: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067

【CVE-2009-1537】Please refer to the official list of affected versions: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028

【CVE-2009-3459】Please refer to the official list of affected versions: https://helpx.adobe.com/security/security-bulletin.html

【CVE-2010-0249】Please refer to the official list of affected versions: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002

【CVE-2010-0806】Please refer to the official list of affected versions: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018

【CVE-2026-41091】Please refer to the official list of affected versions: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091

【CVE-2026-45498】Please refer to the official list of affected versions: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498

【CVE-2025-34291】Langflow versions 1.6.9 and earlier

【CVE-2026-34926】Please refer to the official list of affected versions https://success.trendmicro.com/en-US/solution/KA-0023430

【CVE-2026-9082】Please refer to the affected versions listed in the official documentation: https://www.drupal.org/sa-core-2026-004

[Recommended Actions]
【CVE-2008-4250】An official patch update has been released for this vulnerability. Please update to the relevant version: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067

【CVE-2009-1537】An official patch update has been released for this vulnerability. Please update to the relevant version: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028

【CVE-2009-3459】Official updates have been released to fix the vulnerabilities. Please update to the relevant version: https://helpx.adobe.com/security/security-bulletin.html

【CVE-2010-0249】Official updates have been released to fix the vulnerabilities. Please update to the relevant version: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002

【CVE-2010-0806】Official updates have been released to fix the vulnerabilities. Please update to the relevant version: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018

【CVE-2026-41091】Official updates have been released to fix the vulnerabilities. Please update to the relevant version: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091

【CVE-2026-45498】An official patch update has been released for this vulnerability. Please update to the relevant version: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498

【CVE-2025-34291】For the corresponding product, upgrade to the following version (or higher): Langflow 1.7.0

【CVE-2026-34926】An official patch update has been released for this vulnerability. Please update to the relevant version: https://success.trendmicro.com/en-US/solution/KA-0023430

【CVE-2026-9082】An official patch update has been released for this vulnerability. Please update to the relevant version: https://www.drupal.org/sa-core-2026-004