Microsoft ceeb toom ntawm qhov tsis zoo tshiab rau Internet Explorer

Microsoft ceeb toom ntawm qhov tsis zoo tshiab rau Internet Explorer
Microsoft ceeb toom ntawm qhov tsis zoo tshiab rau Internet Explorer
Anonim

Microsoft tau tshaj tawm lus ceeb toom rau cov neeg siv tias qhov muaj qhov tsis zoo tshiab pom hauv Internet Explorer tuaj yeem ua rau lawv muaj kev pheej hmoo los ntawm cov ntaub ntawv Office.

Cov lus qhia tau tshaj tawm rau ntawm Microsoft Security Response Center's (MSRC) lub vev xaib, uas yog Mircosoft's cybersecurity team uas mob siab rau tiv thaiv cov neeg siv los ntawm kev hem thawj thiab kev tawm tsam.

Microsoft tsis txhawb Internet Explorer ntxiv lawm thiab pom zoo kom koj hloov tshiab rau Edge browser tshiab. Lub taub hau mus rau lawv qhov chaw mus rub tawm qhov tshiab tshaj plaws.

Image
Image

Qhov tsis zoo tau raug hu ua CVE-2021-40444, thiab nws tau piav qhia tias yog lub qhov hauv MSHTML, uas yog lub tshuab browser tom qab Internet Explorer. Dab tsi hem cov neeg ua yeeb yam ua yog tsim cov ntaub ntawv Microsoft Office uas muaj kev tswj hwm ActiveX siab phem.

ActiveX tswj yog me me ntawm software uas tso cai rau cov vev xaib muab cov ntsiab lus ntawm Internet Explorer. Thaum ib tus neeg siv qhib cov ntaub ntawv muaj tus kab mob, lub siab phem ActiveX tswj implants malware rau hauv lub computer tsom.

Lub MSRC tam sim no tab tom tshawb xyuas qhov xwm txheej. Qhov tsis txaus ntseeg tseem tsis tau raug kho, txawm hais tias Microsoft feem ntau yuav ua haujlwm kho qhov teeb meem no.

Qhov teeb meem no hnyav heev uas txawm tias US-CERT (Tebchaws Meskas Lub Tsev Haujlwm Saib Xyuas Kev Khomob Kub Ceev) tau tshaj tawm ceeb toom ntawm nws tus account Twitter rau cov kws tshaj lij IT thoob plaws tebchaws los tiv thaiv lawv cov kab ke.

Kev txo qis tau nyob rau hauv qhov chaw thaum Microsoft Office qhib cov ntaub ntawv nqa tawm hauv internet hauv Kev Tiv Thaiv Saib lossis Daim Ntawv Thov Tiv Thaiv rau Chaw Haujlwm los tiv thaiv kev tawm tsam. Lub tuam txhab cov cuab yeej tiv thaiv kab mob, xws li Defender for Endpoint, kuj tuaj yeem tshawb xyuas qhov kev siv thiab tiv thaiv koj lub computer.

The MSRC pom zoo kom cov neeg siv khaws lawv cov tshuaj tiv thaiv kab mob thiab tshuaj tiv thaiv malware mus txog hnub tim. Cov neeg siv uas tau hloov kho lawv cov kev tiv thaiv tsis muaj dab tsi txhawj txog.

Pom zoo: