答案已發布3 天前Last edited 3 天前30 來源

Chrome 又中招！2026 年第五個零日漏洞 CVE-2026-11645 正被黑客利用，即睇點更新保平安

CVE 2026 11645 係一個 CVSS 8.8 分嘅高危漏洞，存在於 Chrome 嘅 V8 引擎，屬於越界讀寫（out of bounds read and write）問題，黑客可以透過特製網頁喺瀏覽器沙盒內執行任意代碼，而且已經有現成嘅攻擊手法喺網上流傳 [2][15]。 Google 已經推出緊急更新，Windows 同 Linux 用戶要升級到 Chrome 149.0.7827.102，macOS 用戶就要升級到 149.0.7827.103。呢次更新一次過修補咗 74 個保安漏洞，其中呢個零日漏洞係由一位代號「303f06e3」嘅匿名研究員喺 4 月 27 號回報，仲拎到 Google 發出嘅 55,00...

使用 Studio Global AI 搜尋並查核事實瀏覽更多熱門頁面

224K0

Conceptual security vulnerability alert illustration showing a digital padlock interface with warning indicators and a stylized Chrome browser window. — What are the details of the fifth Chrome zero-day exploited in 2026, including the CVE designation (CVE-2026-11645), its nature as an out-ofThe fifth Chrome zero-day of 2026 prompted an out-of-band emergency patch from Google after confirmation of active exploitation.
AI 提示
Create a landscape editorial hero image for this Studio Global article: What are the details of the fifth Chrome zero-day exploited in 2026, including the CVE designation (CVE-2026-11645), its nature as an out-of. Article summary: Here are the confirmed details for **CVE-2026-11645**, the fifth Chrome zero-day exploited in the wild in 2026, along with verified sourcing for each claim.. Topic tags: general, general web, user generated. Reference image context from search candidates: Reference image 1: visual subject "# CVE-2026-11645, Chrome V8 Zero-Day in Active Exploitation. CVE-2026-11645 is not a routine Chrome bug buried inside a large browser update. Google’s June 8, 2026 Stable Channel r" source context "CVE-2026-11645, Chrome V8 Zero-Day in Active Exploitation" Reference image 2: visual subject "Google fixes the fifth actively exploited Chrome zero-day of 2026. U.S. CISA adds Berr
openai.com

Google 喺 2026 年 6 月 8 至 9 號，推出咗一個緊急嘅「頻外」（out-of-band）Chrome 更新，目的係修補一個已經俾黑客攞嚟用嘅零日漏洞（zero-day）。呢個漏洞編號係 CVE-2026-11645，存在於 Chrome 處理 JavaScript 同 WebAssembly 嘅核心組件——V8 引擎入面，係一個越界讀寫（out-of-bounds read and write）嘅記憶體漏洞。今次更新一次過修復咗 74 個安全問題，但呢個零日漏洞係當中最危急嘅，亦係 Chrome 喺 2026 年第五次被發現有漏洞正被主動攻擊。

CVE-2026-11645 漏洞有幾嚴重？

成個問題嘅根源喺 V8 引擎。呢個引擎係 Chrome 用嚟執行所有 JavaScript 程式碼嘅心臟，好多基於 Chromium 嘅瀏覽器（例如 Microsoft Edge、Brave 等等）都係用緊佢。Google 嘅官方安全公告將 CVE-2026-11645 形容為「V8 入面嘅越界記憶體存取」，而美國 NIST 國家漏洞數據庫就進一步解釋，呢個係一個越界讀同寫嘅問題。

簡單啲講，黑客只需要引誘你㩒入一個特製嘅惡意網頁，就可以利用呢個記憶體安全漏洞，喺你個瀏覽器嘅沙盒（sandbox）入面執行任意嘅程式碼。沙盒係 Chrome 嘅一個保安機制，用嚟隔離瀏覽器同你嘅作業系統，就算俾人攻擊，理論上都唔會直接影響到你部電腦。但今次個漏洞嘅危險之處，係佢嘅 CVSS 風險評分高達 8.8 分，屬於「高危」級別。一旦攻擊成功，黑客就可以喺瀏覽器嘅權限層級執行程式碼，呢個權限通常已經足夠佢哋安裝惡意軟件、偷走你嘅 Cookie 同密碼，或者配合其他漏洞進一步攻擊你嘅系統。

Studio Global AI

Search, cite, and publish your own answer

Use this topic as a starting point for a fresh source-backed answer, then compare citations before you share it.

使用 Studio Global AI 搜尋並查核事實

人們還問