張貼日期:2026/03/19
【漏洞預警】微軟釋出115年3月份安全性更新
- 主旨說明:【漏洞預警】微軟釋出115年3月份安全性更新
- 內容說明:
- 轉發 國家資安資訊分享與分析中心 資安訊息警訊 NISAC-200-202603-00000009
- 微軟釋出115年3月份安全性更新,共修補包含SQL Server、Microsoft Office SharePoint及Active Directory Domain Services等共84個漏洞,其中包含16個CVSS達8.8分之高風險漏洞,請儘速確認並進行修補。
- 影響平台:
- 影響軟體與服務項目如下:
- Active Directory Domain Services
- ASP.NET Core
- Azure Arc
- Azure Compute Gallery
- Azure Entra ID
- Azure IoT Explorer
- Azure Linux Virtual Machines
- Azure MCP Server
- Azure Portal Windows Admin Center
- Azure Windows Virtual Machine Agent
- Broadcast DVR
- Connected Devices Platform Service (Cdpsvc)
- GitHub Repo: zero-shot-scfoundation
- Microsoft Authenticator
- Microsoft Brokering File System
- Microsoft Devices Pricing Program
- Microsoft Graphics Component
- Microsoft Office
- Microsoft Office Excel
- Microsoft Office SharePoint
- .NET
- Payment Orchestrator Service
- Push Message Routing Service
- Role: Windows Hyper-V
- SQL Server
- System Center Operations Manager
- Windows Accessibility Infrastructure (ATBroker.exe)
- Windows Ancillary Function Driver for WinSock
- Windows App Installer
- Windows Authentication Methods
- Windows Bluetooth RFCOM Protocol Driver
- Windows Device Association Service
- Windows DWM Core Library
- Windows Extensible File Allocation
- Windows File Server
- Windows GDI
- Windows GDI+
- Windows Kerberos
- Windows Kernel
- Windows MapUrlToZone
- Windows Mobile Broadband
- Windows NTFS
- Windows Performance Counters
- Windows Print Spooler Components
- Windows Projected File System
- Windows Resilient File System (ReFS)
- Windows Routing and Remote Access Service (RRAS)
- Windows Shell Link Processing
- Windows SMB Server
- Windows System Image Manager
- Windows Telephony Service
- Windows Universal Disk Format File System Driver (UDFS)
- Windows Win32K
- Winlogon
- 建議措施:
- 目前微軟官方已針對弱點釋出修復版本,請儘速完成更新,或聯絡系統維護廠商, 詳細資訊參考微軟官方連結: https://msrc.microsoft.com/update-guide/releaseNote/2026-Mar
- 參考資料:
計算機與通訊中心
網路系統組 敬啟