轉發 國家資通安全研究院

內容說明：微軟釋出115年7月份安全性更新，共修補628個漏洞，其中包含76個高風險漏洞與3個已遭利用之漏洞，請儘速確認並進行修補。

影響平台：
【具高風險漏洞之產品】
Active Directory Certificate Services (AD CS)
CVE-2026-54121

Active Directory Domain Services
CVE-2026-49178

Age of Empires II: Definitive Edition Game
CVE-2026-50663

ASP.NET Core
CVE-2026-47300
CVE-2026-47303

Azure CycleCloud
CVE-2026-57969

Azure Monitor Agent
CVE-2026-47632

Azure OpenAI
CVE-2026-45499

Desktop Window Manager
CVE-2026-50692

GitHub Copilot and Visual Studio
CVE-2026-41109

M365 Copilot
CVE-2026-41106

Microsoft Configuration Manager
CVE-2026-47301

Microsoft Copilot
CVE-2026-48561

Microsoft Dynamics NAV
CVE-2026-55944

Microsoft Edge (Chromium-based)
CVE-2026-56645
CVE-2026-57974
CVE-2026-57981
CVE-2026-58289

Microsoft Entra Provisioning Service (SyncFabric)
CVE-2026-57100

Microsoft Exchange Online
CVE-2026-54998

Microsoft Exchange Server
CVE-2026-55005
CVE-2026-55008

Microsoft Fabric Data Warehouse
CVE-2026-56642

Microsoft Input Method Editor (IME)
CVE-2026-58534

Microsoft Office SharePoint
CVE-2026-50522
CVE-2026-55040
CVE-2026-55052
CVE-2026-58277
CVE-2026-58644

Microsoft Windows Media Foundation
CVE-2026-57087
CVE-2026-57090
CVE-2026-57094

Minecraft Bedrock Dedicated Server
CVE-2026-55010

Reliable Multicast Transport Driver (RMCAST)
CVE-2026-54982

Remote Desktop Client
CVE-2026-50474
CVE-2026-54990

SQL Server
CVE-2026-47295
CVE-2026-54117
CVE-2026-54118

SQL Server ODBC driver
CVE-2026-42990

Visual Studio Code
CVE-2026-57102

Window PC Manager
CVE-2026-50438

Windows Admin Center
CVE-2026-56196
CVE-2026-56197

Windows DHCP Server
CVE-2026-48564
CVE-2026-50370
CVE-2026-50518
CVE-2026-56159

Windows DirectX
CVE-2026-50382

Windows FTP Service
CVE-2026-49172

Windows GDI+
CVE-2026-50380

Windows Kernel
CVE-2026-49795
CVE-2026-49798
CVE-2026-50477
CVE-2026-50670
CVE-2026-50687

Windows Media
CVE-2026-50398

Windows Message Queuing
CVE-2026-50447

Windows MIDI Service Module
CVE-2026-50342

Windows Network File System
CVE-2026-56194

Windows Print Spooler Components
CVE-2026-5860

Windows RDP
CVE-2026-56190
CVE-2026-58594

Windows Remote Access Connection Manager
CVE-2026-50666

Windows Remote Access Service Infrastructure
CVE-2026-56647

Windows Remote Desktop Services
CVE-2026-50369
CVE-2026-58626

Windows Runtime
CVE-2026-50385
CVE-2026-50413

Windows Server Network driver
CVE-2026-56188

Windows Server Update Service
CVE-2026-50444

Windows SMB Server
CVE-2026-50360

Windows TCP/IP
CVE-2026-54999

Windows VMSwitch
CVE-2026-57092

Windows Win32K
CVE-2026-50489
CVE-2026-54107

【已遭利用之產品】
Active Directory Federation Services (AD FS)
CVE-2026-56155

Microsoft Office SharePoint
CVE-2026-56164
CVE-2026-58644

解決辦法：
目前微軟官方已針對弱點釋出修復版本，請各機關可聯絡系統維護廠商或參考以下連結：
https://msrc.microsoft.com/update-guide/releaseNote/2026-Jul