微軟釋出115年7月份安全性更新,共修補628個漏洞,其中包含76個高風險漏洞與3個已遭利用之漏洞,請儘速確認並進行修補。
影響平台
【具高風險漏洞之產品】
Active Directory Certificate Services (AD CS)
CVE-2026-54121
Active Directory Domain Services
CVE-2026-49178
Age of Empires II: Definitive Edition Game
CVE-2026-50663
ASP.NET Core
CVE-2026-47300
CVE-2026-47303
Azure CycleCloud
CVE-2026-57969
Azure Monitor Agent
CVE-2026-47632
Azure OpenAI
CVE-2026-45499
Desktop Window Manager
CVE-2026-50692
GitHub Copilot and Visual Studio
CVE-2026-41109
M365 Copilot
CVE-2026-41106
Microsoft Configuration Manager
CVE-2026-47301
Microsoft Copilot
CVE-2026-48561
Microsoft Dynamics NAV
CVE-2026-55944
Microsoft Edge (Chromium-based)
CVE-2026-56645
CVE-2026-57974
CVE-2026-57981
CVE-2026-58289
Microsoft Entra Provisioning Service (SyncFabric)
CVE-2026-57100
Microsoft Exchange Online
CVE-2026-54998
Microsoft Exchange Server
CVE-2026-55005
CVE-2026-55008
Microsoft Fabric Data Warehouse
CVE-2026-56642
Microsoft Input Method Editor (IME)
CVE-2026-58534
Microsoft Office SharePoint
CVE-2026-50522
CVE-2026-55040
CVE-2026-55052
CVE-2026-58277
CVE-2026-58644
Microsoft Windows Media Foundation
CVE-2026-57087
CVE-2026-57090
CVE-2026-57094
Minecraft Bedrock Dedicated Server
CVE-2026-55010
Reliable Multicast Transport Driver (RMCAST)
CVE-2026-54982
Remote Desktop Client
CVE-2026-50474
CVE-2026-54990
SQL Server
CVE-2026-47295
CVE-2026-54117
CVE-2026-54118
SQL Server ODBC driver
CVE-2026-42990
Visual Studio Code
CVE-2026-57102
Window PC Manager
CVE-2026-50438
Windows Admin Center
CVE-2026-56196
CVE-2026-56197
Windows DHCP Server
CVE-2026-48564
CVE-2026-50370
CVE-2026-50518
CVE-2026-56159
Windows DirectX
CVE-2026-50382
Windows FTP Service
CVE-2026-49172
Windows GDI+
CVE-2026-50380
Windows Kernel
CVE-2026-49795
CVE-2026-49798
CVE-2026-50477
CVE-2026-50670
CVE-2026-50687
Windows Media
CVE-2026-50398
Windows Message Queuing
CVE-2026-50447
Windows MIDI Service Module
CVE-2026-50342
Windows Network File System
CVE-2026-56194
Windows Print Spooler Components
CVE-2026-58608
Windows RDP
CVE-2026-56190
CVE-2026-58594
Windows Remote Access Connection Manager
CVE-2026-50666
Windows Remote Access Service Infrastructure
CVE-2026-56647
Windows Remote Desktop Services
CVE-2026-50369
CVE-2026-58626
Windows Runtime
CVE-2026-50385
CVE-2026-50413
Windows Server Network driver
CVE-2026-56188
Windows Server Update Service
CVE-2026-50444
Windows SMB Server
CVE-2026-50360
Windows TCP/IP
CVE-2026-54999
Windows VMSwitch
CVE-2026-57092
Windows Win32K
CVE-2026-50489
CVE-2026-54107
【已遭利用之產品】
Active Directory Federation Services (AD FS)
CVE-2026-56155
Microsoft Office SharePoint
CVE-2026-56164
CVE-2026-58644
處置建議
目前微軟官方已針對弱點釋出修復版本,請各機關可聯絡系統維護廠商或參考以下連結:
https://msrc.microsoft.com/update-guide/releaseNote/2026-Jul
參考資料
1. https://msrc.microsoft.com/update-guide/releaseNote/2026-Jul
Facebook
Twitter
LINE