轉發 國家資通安全研究院

內容說明：
微軟釋出115年10月份安全性更新，共修補1416個漏洞，其中包含268個高風險漏洞與1個已遭利用之漏洞，請儘速確認並進行修補。

影響平台：
【具高風險漏洞之產品】
.NET
CVE-2026-70174, CVE-2026-83520, CVE-2026-87697, CVE-2026-96224, CVE-2026-96235,
CVE-2026-96957

.NET and Visual Studio
CVE-2026-102869

.NET Framework
CVE-2026-70007, CVE-2026-70035, CVE-2026-85363, CVE-2026-108398

Active Directory Domain Services
CVE-2026-88165

Active Directory Federation Services (AD FS)
CVE-2026-96252

ASP.NET Core
CVE-2026-70188, CVE-2026-88092, CVE-2026-96230, CVE-2026-102870

Azure App Service
CVE-2026-77900

Azure SRE Agent
CVE-2026-69435

Dynamics Business Central
CVE-2026-100214, CVE-2026-102226, CVE-2026-105727

Graphic Fonts
CVE-2026-69326

Microsoft Bookings
CVE-2026-94510

Microsoft Configuration Manager
CVE-2026-88075

Microsoft Dataverse
CVE-2026-88131

Microsoft Exchange Server
CVE-2026-70279, CVE-2026-77910, CVE-2026-96940

Microsoft Failover Cluster Virtual Driver
CVE-2026-96864

Microsoft Internet Messaging API
CVE-2026-83778

Microsoft MPEG-2 Video Extension
CVE-2026-70343

Microsoft Office
CVE-2026-88196, CVE-2026-88197

Microsoft Office Access
CVE-2026-102849, CVE-2026-102850, CVE-2026-105591, CVE-2026-105593, CVE-2026-105595,
CVE-2026-105596, CVE-2026-105597, CVE-2026-105598, CVE-2026-105716, CVE-2026-105717

Microsoft Office Excel
CVE-2026-70254, CVE-2026-77902, CVE-2026-88145, CVE-2026-97003, CVE-2026-97004,
CVE-2026-97007, CVE-2026-97008, CVE-2026-97010, CVE-2026-97011, CVE-2026-97017,
CVE-2026-97738, CVE-2026-97739, CVE-2026-97741, CVE-2026-97742, CVE-2026-97745,
CVE-2026-97746, CVE-2026-97747, CVE-2026-97748, CVE-2026-97750, CVE-2026-97751,
CVE-2026-97752, CVE-2026-97753, CVE-2026-97754, CVE-2026-97755, CVE-2026-97756,
CVE-2026-97757, CVE-2026-97758, CVE-2026-97759, CVE-2026-97761, CVE-2026-97762,
CVE-2026-97763, CVE-2026-97765, CVE-2026-97766, CVE-2026-97767, CVE-2026-97768,
CVE-2026-97769, CVE-2026-97770, CVE-2026-97771, CVE-2026-97772, CVE-2026-97773,
CVE-2026-97775, CVE-2026-97776, CVE-2026-97777, CVE-2026-97778, CVE-2026-97780,
CVE-2026-100209, CVE-2026-100210, CVE-2026-100211, CVE-2026-100212, CVE-2026-105718

Microsoft Office OneNote
CVE-2026-97781, CVE-2026-102858

Microsoft Office Outlook
CVE-2026-70242, CVE-2026-70256, CVE-2026-70257, CVE-2026-70282, CVE-2026-70291,
CVE-2026-88156, CVE-2026-97012, CVE-2026-97016, CVE-2026-97749

Microsoft Office PowerPoint
CVE-2026-70215, CVE-2026-88144, CVE-2026-88178

Microsoft Office SharePoint
CVE-2026-69943, CVE-2026-70246, CVE-2026-70266, CVE-2026-85900, CVE-2026-88155,
CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88198, CVE-2026-88200,
CVE-2026-96044, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863

Microsoft Office Visio
CVE-2026-102855, CVE-2026-102856, CVE-2026-102857

Microsoft Office Word
CVE-2026-70268, CVE-2026-70287, CVE-2026-70300, CVE-2026-70301, CVE-2026-70302,
CVE-2026-83891, CVE-2026-88150, CVE-2026-88186, CVE-2026-88202

Microsoft Partner Center
CVE-2026-96207

Microsoft PostScript Printer Driver
CVE-2026-70147, CVE-2026-70153, CVE-2026-108467

Microsoft PowerShell
CVE-2026-96251

Microsoft QUIC
CVE-2026-100219, CVE-2026-105016

Microsoft Windows Codecs Library
CVE-2026-108400

Microsoft Windows Media Foundation
CVE-2026-70258, CVE-2026-83517, CVE-2026-85814, CVE-2026-96952

Microsoft Windows Search Component
CVE-2026-83725, CVE-2026-105010

Microsoft XML
CVE-2026-83935

Network Policy Server (NPS)
CVE-2026-85806, CVE-2026-100222

OpenSSH for Windows
CVE-2026-83923, CVE-2026-88157, CVE-2026-97816

Remote Access Point-to-Point Protocol (PPP) EAP-TLS
CVE-2026-84015

Remote Desktop Client
CVE-2026-83688, CVE-2026-103575, CVE-2026-108458

Role: DNS Server
CVE-2026-70167, CVE-2026-83642, CVE-2026-83869, CVE-2026-83889, CVE-2026-85903,
CVE-2026-88112, CVE-2026-88114, CVE-2026-88116, CVE-2026-96113

RPC Runtime
CVE-2026-83910, CVE-2026-88219, CVE-2026-102203

Skype for Business and Microsoft Lync
CVE-2026-70297

SQL Server
CVE-2026-65674, CVE-2026-94512

Visual Studio Code
CVE-2026-69370, CVE-2026-70098, CVE-2026-102235, CVE-2026-102238

Visual Studio Tools for Applications and SQL Server Management Studio
CVE-2026-103572

WebDAV
CVE-2026-70262, CVE-2026-88136, CVE-2026-102217

Windows AppX Deployment Extensions
CVE-2026-69945

Windows Background Intelligent Transfer Service (BITS)
CVE-2026-88142, CVE-2026-88159

Windows Bind Filter Driver
CVE-2026-70299

Windows BitLocker
CVE-2026-96909

Windows Bluetooth Service
CVE-2026-83777

Windows Camera Frame Server Monitor
CVE-2026-83771

Windows CCFFilter Driver
CVE-2026-83780

Windows CD-ROM Driver
CVE-2026-70275

Windows Client Side Caching driver (csc.sys)
CVE-2026-70149

Windows Client-Side Caching (CSC) Service
CVE-2026-70068

Windows Core Messaging
CVE-2026-69918

Windows Credential Guard
CVE-2026-70580

Windows DHCP Client
CVE-2026-70250

Windows DHCP Server
CVE-2026-70069, CVE-2026-96320, CVE-2026-96934

Windows Distributed File System (DFS)
CVE-2026-85931

Windows Encrypting File System (EFS)
CVE-2026-83759, CVE-2026-83784

Windows Error Reporting
CVE-2026-83519, CVE-2026-83643, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815

Windows Event Tracing
CVE-2026-83874

Windows Failover Cluster
CVE-2026-88102

Windows GDI
CVE-2026-70089, CVE-2026-83929

Windows GDI+
CVE-2026-83934

Windows Graphics Kernel
CVE-2026-88073

Windows Hyper-V
CVE-2026-83716, CVE-2026-83728, CVE-2026-102214, CVE-2026-105733

Windows Image Acquisition
CVE-2026-83523

Windows Imaging Component
CVE-2026-69886, CVE-2026-77496

Windows Internet Information Services
CVE-2026-70024

Windows iSCSI
CVE-2026-69521, CVE-2026-69634, CVE-2026-69705, CVE-2026-69883

Windows Kernel
CVE-2026-96913

Windows Libarchive
CVE-2026-69639, CVE-2026-69985

Windows Local Security Authority Subsystem Service (LSASS)
CVE-2026-83928, CVE-2026-96219

Windows Media Player
CVE-2026-96096

Windows Media Video Decoder
CVE-2026-100220

Windows Message Queuing Queue Manager
CVE-2026-100202

Windows NDIS
CVE-2026-105007

Windows Network Load Balancing
CVE-2026-83862

Windows OLE
CVE-2026-96924

Windows OLE DB
CVE-2026-70210

Windows Partition Management Driver
CVE-2026-83797, CVE-2026-83851, CVE-2026-97805

Windows PCI Bus Driver
CVE-2026-96917

Windows PowerShell
CVE-2026-70185, CVE-2026-83578, CVE-2026-85817

Windows Raw Image Extension
CVE-2026-96202, CVE-2026-96943

Windows Rich Text Edit Control
CVE-2026-70096

Windows Routing and Remote Access Service (RRAS)
CVE-2026-70158, CVE-2026-85339, CVE-2026-85792, CVE-2026-85809

Windows Schannel
CVE-2026-85818, CVE-2026-105008

Windows Server for NFS
CVE-2026-88115

Windows Shell
CVE-2026-83782, CVE-2026-85936

Windows SmartScreen
CVE-2026-108463

Windows SMB Client
CVE-2026-83789

Windows Storport Miniport Driver
CVE-2026-69765

Windows System Information Console
CVE-2026-70157

Windows Text Shaping
CVE-2026-83770, CVE-2026-97814, CVE-2026-102210, CVE-2026-102225

Windows UI Immersive Server
CVE-2026-85905

Windows Virtualization-Based Security (VBS) Enclave
CVE-2026-96914, CVE-2026-108471

Windows Volume Manager Extension Driver
CVE-2026-85928

【已遭利用之產品】
Windows Shell
CVE-2026-96951

解決辦法：
目前微軟官方已針對弱點釋出修復版本，請各機關可聯絡系統維護廠商或參考以下連結：
https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct