
CVE-2026-125350為「釋放後使用」漏洞,Windows、Mac及Linux用戶皆受影響,官方呼籲盡快更新
Google緊急發布Chrome安全更新,修補已遭駭客實際利用的零日漏洞CVE-2026-125350,影響Windows、Mac及Linux桌面版用戶,這是今年第8個遭利用的Chrome零日漏洞,官方建議用戶立即檢查並更新至版本157.0.8103.50/.51。
AI-generated summary
Google近日緊急釋出Chrome安全更新,修補一項已遭駭客實際利用的高風險零日漏洞,影響Windows、Mac及Linux電腦用戶。這也是Chrome今年第8個遭駭客利用的零日漏洞。
習慣使用Google Chrome瀏覽器的民眾注意了!Google近日緊急釋出安全更新,修補一項已遭駭客實際利用的高風險漏洞,Windows、Mac及Linux電腦用戶都受到影響。這也是Chrome今年第8個遭駭客利用的零日漏洞,官方呼籲用戶盡快更新,避免電腦暴露在安全風險中。
這次漏洞編號為CVE-2026-125350,存在於Chrome處理網頁資料的XML元件中,屬於「釋放後使用」(Use-After-Free)漏洞。簡單來說,就是瀏覽器在處理資料時發生記憶體管理錯誤,可能讓駭客有機會趁虛而入,進一步執行惡意程式碼。
更值得注意的是,這項漏洞並非只是潛在風險。Google已證實,發現駭客在真實環境中利用漏洞進行攻擊。不過,目前尚未公布攻擊對象、受害人數及具體攻擊方式,因此無法確認實際影響範圍。
針對這次安全漏洞,Google已釋出Chrome桌面版更新,Windows及macOS的修補版本為157.0.8103.50/.51,Linux則為157.0.8103.50,後續更新版本也包含相關修補。
一般用戶不必特別了解複雜的漏洞原理,只要確認Chrome已更新至安全版本即可。操作方式也很簡單,開啟Chrome後,點選右上角「⋮」選單,依序進入「說明」→「關於Google Chrome」,系統便會自動檢查是否有新版本,完成更新後重新啟動瀏覽器即可。
Google表示,更新可能需要數天至數週才能全面推送至所有用戶。由於這次漏洞已經遭到實際利用,建議民眾不要拖延,尤其每天使用Chrome上網、登入社群帳號或處理工作資料的用戶,更應盡快確認瀏覽器版本。

Microsoft, the global software giant, stated that consumer product services have been fully restored at 4:10 pm UTC on the 13th, and Microsoft 365 enterprise services are gradually recovering. Previously, Microsoft 365, Outlook, Teams and other services crashed on the 12th, affecting users in many places around the world.
Beijing Language and Culture University revealed that the first Pakistani foreign astronaut to visit the Chinese space station had experience in learning Chinese, and two candidates had studied Chinese at the Confucius Institute in Islamabad, Beijing Language and Culture University.

Google recently launched the November Pixel Drop feature update, but it caused many disasters. Many Pixel 10 and Pixel 11 series users have complained about black camera screens, wireless charging failures, Wi-Fi abnormalities and lock screen issues after the update, causing user dissatisfaction.

Former Huida CEO Huang Jen-Hsun was revealed to have had an extramarital affair with Huang Le, a former Singaporean Megaspeed executive suspected of being a Chinese spy. The company has handled more than US$4 billion in Huida chip transactions in two years, but its offices in Singapore and Malaysia are empty. It is suspected of circumventing US export controls to transfer chips to China and has corporate ties with Alibaba.

The reporter from the main station decoded Shenzhen's technological innovation from a maritime perspective, reporting that Qianhai has transformed from a tidal flat into an innovation highland with 12 unicorn companies and more than 2,000 national high-tech enterprises. The Robot Valley has opened up the entire chain of industry, academia and research, and the Hetao Shenzhen-Hong Kong Science and Technology Innovation Cooperation Zone has achieved institutional ice-breaking and twin-city collaboration.