메뉴열기
메뉴열기
취약점 소개
신고포상제
취약점 신고/조회
기업 및 기관
취약점 정보 공유
알림마당
로그인
Home > 취약점 정보 공유 > 보안공지
보안공지

목록

조회수 : 7,132


美 CISA 발표 주요 Exploit 정보공유(Update. 2025-09-04)2025-09-04
현재 자주 악용되고 있는 취약점 목록으로, 취약한 버전의 SW를 사용 중인 경우 긴급 패치를 권고 드립니다.
* 참조 링크 : https://www.cisa.gov/known-exploited-vulnerabilities-catalog

cveIDvendorProjectvulnerabilityNamedateAddedshortDescriptionrequiredActiondueDate
CVE-2025-53690SitecoreSitecore Multiple Products Deserialization of Untrusted Data Vulnerability2025-09-04Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud contain a deserialization of untrusted data vulnerability involving the use of default machine keys. This flaw allows attackers to exploit exposed ASP.NET machine keys to achieve remote code execution. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.2025-09-25
CVE-2025-48543AndroidAndroid Runtime Use-After-Free Vulnerability2025-09-04Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation.Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.2025-09-25
CVE-2025-38352LinuxLinux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability2025-09-04Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.2025-09-25
출처 사이트 : https://www.cisa.gov/known-exploited-vulnerabilities-catalog