高危保安警報 (A26-08-28): Oracle 產品多個漏洞 (2026年8月)


 

發布日期: 2026年 8月 19日

描述:

Oracle 發布了重要修補程式更新公告，包括一系列應對不同 Oracle 產品中多個安全漏洞的修補程式。有關安全性更新的列表，請參考以下網址:
https://www.oracle.com/security-alerts/cspuaug2026.html

有報告指多個漏洞 (CVE-2022-37434、CVE-2022-40152、CVE-2023-50164、CVE-2026-2332、CVE-2026-9563、CVE-2026-41240、CVE-2026-42587 及 CVE-2026-65914) 的概念驗證 (PoC) 程式碼已被公開。系統管理員應立即為受影響的系統安裝修補程式，以減低受到網絡攻擊的風險。

 

受影響的系統:

  • Oracle Java SE
  • Database
  • Fusion Applications 及 Middleware
  • Oracle MySQL Product Suite
  • Oracle Linux 及 Virtualization

有關受影響產品的完整列表，請參閱以下網址：

https://www.oracle.com/security-alerts/cspuaug2026.html

 

影響:

成功利用漏洞可以導致受影響的系統發生遠端執行程式碼、服務被拒絕、權限提升、泄漏資訊、繞過保安限制、仿冒詐騙或篡改。

 

建議:

現已有適用於受影響系統的修補程式。受影響系統的用戶應遵從產品供應商的建議，立即採取行動以降低風險。

Oracle Java SE 產品的修補程式可從以下連結下載:

Java Platform SE 8u503 (JDK 及 JRE)
Java Platform SE 11.0.32.1 (JDK 及 JRE)
Java Platform SE 17.0.20.1 (JDK 及 JRE)
Java Platform SE 21.0.12.1 (JDK 及 JRE)
Java Platform SE 25.0.4.1 (JDK 及 JRE)
Java Platform SE 26.0.2.1 (JDK 及 JRE)
https://www.oracle.com/java/technologies/javase-downloads.html

OpenJDK 的修補程式可從以下連結下載:
https://jdk.java.net

用戶也可通過以下安全公告，以獲取其他 Oracle 產品安全更新方面的資訊:
https://www.oracle.com/security-alerts/cspuaug2026.html

用戶可聯絡其產品支援供應商，以取得修補程式及相關支援。

 

進一步資訊:

  • https://www.oracle.com/security-alerts/cspuaug2026.html
  • https://www.hkcert.org/tc/security-bulletin/oracle-products-multiple-vulnerabilities_20260819
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4104
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31805
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23305
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23437
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34169
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40150
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40152
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26464
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50164
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9143
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10095
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13151
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14821
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0968
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2332
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4176
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4800
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5795
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9563
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29167
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33186
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33557
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33929
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34481
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41240
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41855
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42587
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42779
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59889
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60391 (to CVE-2026-60393)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60412 (to CVE-2026-60415)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60589 (to CVE-2026-60592)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60672
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60679 (to CVE-2026-60680)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60682
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60693
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60696
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60698 (to CVE-2026-60699)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60702
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60707
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60715 (to CVE-2026-60716)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60720 (to CVE-2026-60722)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60726 (to CVE-2026-60731)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60733
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60737
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60742
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60748
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60751 (to CVE-2026-60754)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60757 (to CVE-2026-60759)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60765 (to CVE-2026-60767)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60769
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60779
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60781 (to CVE-2026-60782)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60791 (to CVE-2026-60792)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60796 (to CVE-2026-60798)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60803
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60808
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60820 (to CVE-2026-60822)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60830 (to CVE-2026-60831)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60841
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60849 (to CVE-2026-60850)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60853
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60856
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60858
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60860 (to CVE-2026-60861)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60865 (to CVE-2026-60866)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60873
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60879
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60883 (to CVE-2026-60884)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60889
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60895
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60902 (to CVE-2026-60903)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60905 (to CVE-2026-60906)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60909
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60914 (to CVE-2026-60916)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60921
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60928
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60933 (to CVE-2026-60935)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60944
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60946 (to CVE-2026-60947)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60949
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60954 (to CVE-2026-60956)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60958
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60961
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60967
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60969 (to CVE-2026-60971)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60975 (to CVE-2026-60977)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60980 (to CVE-2026-60981)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60983
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60990 (to CVE-2026-60996)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60998
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61001 (to CVE-2026-61003)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61007 (to CVE-2026-61008)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61011
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61016 (to CVE-2026-61018)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61021 (to CVE-2026-61022)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61029
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61032 (to CVE-2026-61034)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61038
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61040
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61042
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61045
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61054
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61058
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61066
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61118
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61124
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61139
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61177
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61193
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61198 (to CVE-2026-61199)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61206
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61208
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61212 (to CVE-2026-61213)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61215
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61219
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61222
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61227 (to CVE-2026-61231)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61241
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61248
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61258 (to CVE-2026-61259)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61265
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61268
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61270
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61272 (to CVE-2026-61273)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61276
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61281
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61284
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61286
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61288
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61290 (to CVE-2026-61291)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61293
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61295 (to CVE-2026-61296)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61298
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61300
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61302
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61305 (to CVE-2026-61308)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61313
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61317 (to CVE-2026-61319)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61321
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61326
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61330 (to CVE-2026-61332)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61339 (to CVE-2026-61342)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62441 (to CVE-2026-62442)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62446
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62448 (to CVE-2026-62450)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62452
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62454 (to CVE-2026-62455)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62457 (to CVE-2026-62463)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62467
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62471
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62475
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62477
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62481
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62485
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62491 (to CVE-2026-62492)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62499 (to CVE-2026-62502)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62506
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62509 (to CVE-2026-62512)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62520
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62522 (to CVE-2026-62523)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62526
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62529
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62531 (to CVE-2026-62533)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62535 (to CVE-2026-62541)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62543 (to CVE-2026-62545)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62550 (to CVE-2026-62555)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62558
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62564
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62566
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62568 (to CVE-2026-62596)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62598 (to CVE-2026-62640)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-65914
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-70668 (to CVE-2026-70747)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-70749 (to CVE-2026-70754)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-70758 (to CVE-2026-70859)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-70861 (to CVE-2026-70868)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-70870 (to CVE-2026-70912)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-70914
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-70916 (to CVE-2026-71046)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-71048 (to CVE-2026-71053)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-71055 (to CVE-2026-71085)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-71087 (to CVE-2026-71092)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-71094 (to CVE-2026-71132)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-71134 (to CVE-2026-71162)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-71164 (to CVE-2026-71167)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-73865 (to CVE-2026-73925)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-73927 (to CVE-2026-73939)


標籤 : Oracle , Java , Oracle Database , Fusion , MySQL , Sun Systems , Oracle Linux
標籤