{"id":1768,"date":"2026-07-16T07:22:45","date_gmt":"2026-07-16T00:22:45","guid":{"rendered":"https:\/\/vncybers.vn\/vi-sao-can-va-nhanh-firefox-chrome-adobe-vmware-trong-tuan-nay\/"},"modified":"2026-07-16T07:22:45","modified_gmt":"2026-07-16T00:22:45","slug":"vi-sao-can-va-nhanh-firefox-chrome-adobe-vmware-trong-tuan-nay","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/vi-sao-can-va-nhanh-firefox-chrome-adobe-vmware-trong-tuan-nay\/","title":{"rendered":"V\u00ec sao c\u1ea7n v\u00e1 nhanh Firefox, Chrome, Adobe v\u00e0 VMware trong tu\u1ea7n n\u00e0y"},"content":{"rendered":"

C\u00e1c b\u1ea3n v\u00e1 m\u1edbi cho Firefox, Chrome, Adobe v\u00e0 VMware trong tu\u1ea7n n\u00e0y cho th\u1ea5y m\u1ed9t nguy\u00ean t\u1eafc quen thu\u1ed9c nh\u01b0ng d\u1ec5 b\u1ecb tr\u00ec ho\u00e3n: h\u1ec7 th\u1ed1ng ph\u1ed5 bi\u1ebfn c\u00e0ng c\u1ea7n \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt nhanh khi l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng xu\u1ea5t hi\u1ec7n. Theo The Hacker News, Mozilla \u0111\u00e3 ph\u00e1t h\u00e0nh Firefox 152.0.6 \u0111\u1ec3 x\u1eed l\u00fd hai l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng c\u00f3 m\u00e3 khai th\u00e1c c\u00f4ng khai, trong khi Google, Adobe v\u00e0 Broadcom c\u0169ng \u0111\u1ed3ng lo\u1ea1t c\u00f4ng b\u1ed1 b\u1ea3n s\u1eeda l\u1ed7i cho nhi\u1ec1u s\u1ea3n ph\u1ea9m quan tr\u1ecdng.<\/p>\n

\"Ng\u01b0\u1eddi<\/p>\n

B\u1ee9c tranh chung c\u1ee7a \u0111\u1ee3t v\u00e1 l\u1ed7i<\/h2>\n

\u0110i\u1ec3m \u0111\u00e1ng ch\u00fa \u00fd \u0111\u1ea7u ti\u00ean n\u1eb1m \u1edf Firefox. Mozilla cho bi\u1ebft hai l\u1ed7 h\u1ed5ng CVE-2026-15718<\/strong> and CVE-2026-15719<\/strong> \u0111\u1ec1u \u0111\u01b0\u1ee3c x\u1ebfp m\u1ee9c nghi\u00eam tr\u1ecdng, li\u00ean quan \u0111\u1ebfn JavaScript\/WebAssembly v\u00e0 th\u00e0nh ph\u1ea7n \u0111i\u1ec1u h\u01b0\u1edbng DOM. H\u00e3ng n\u00f3i \u0111\u00e3 bi\u1ebft m\u00e3 khai th\u00e1c \u0111\u01b0\u1ee3c c\u00f4ng khai, d\u00f9 ch\u01b0a ghi nh\u1eadn vi\u1ec7c b\u1ecb l\u1ea1m d\u1ee5ng trong th\u1ef1c t\u1ebf t\u1ea1i th\u1eddi \u0111i\u1ec3m c\u00f4ng b\u1ed1.<\/p>\n

Google c\u0169ng ph\u00e1t h\u00e0nh b\u1ea3n v\u00e1 cho 15 l\u1ed7 h\u1ed5ng trong Chrome, trong \u0111\u00f3 c\u00f3 hai l\u1ed7i use-after-free nghi\u00eam tr\u1ecdng \u1edf Ozone l\u00e0 CVE-2026-15764<\/strong> and CVE-2026-15765<\/strong>. C\u00e1c l\u1ed7 h\u1ed5ng d\u1ea1ng n\u00e0y c\u00f3 th\u1ec3 d\u1eabn t\u1edbi h\u1ecfng b\u1ed9 nh\u1edb khi ng\u01b0\u1eddi d\u00f9ng b\u1ecb thuy\u1ebft ph\u1ee5c t\u01b0\u01a1ng t\u00e1c v\u1edbi trang HTML \u0111\u1ed9c h\u1ea1i, v\u00ec v\u1eady tr\u00ecnh duy\u1ec7t c\u1ea7n \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt c\u00e0ng s\u1edbm c\u00e0ng t\u1ed1t tr\u00ean Windows, macOS v\u00e0 Linux.<\/p>\n

Adobe v\u00e0 VMware m\u1edf r\u1ed9ng ph\u1ea1m vi r\u1ee7i ro<\/h2>\n

V\u1edbi Adobe, s\u1ed1 l\u01b0\u1ee3ng b\u1ea3n v\u00e1 l\u1edbn h\u01a1n nhi\u1ec1u: 88 l\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c x\u1eed l\u00fd tr\u00ean ColdFusion, Commerce, Magento Open Source, Experience Manager v\u00e0 Illustrator. Trong \u0111\u00f3, ColdFusion ti\u1ebfp t\u1ee5c l\u00e0 s\u1ea3n ph\u1ea9m c\u1ea7n ch\u00fa \u00fd v\u00ec t\u1eebng nhi\u1ec1u l\u1ea7n b\u1ecb tin t\u1eb7c khai th\u00e1c nhanh sau khi b\u1ea3n v\u00e1 \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1.<\/p>\n

\u1ede ph\u00eda h\u1ea1 t\u1ea7ng doanh nghi\u1ec7p, Broadcom ph\u00e1t h\u00e0nh b\u1ea3n s\u1eeda cho CVE-2026-47865<\/strong>, m\u1ed9t l\u1ed7 h\u1ed5ng bypass x\u00e1c th\u1ef1c nghi\u00eam tr\u1ecdng trong VMware Avi Load Balancer v\u1edbi \u0111i\u1ec3m CVSS 9.8. N\u1ebfu b\u1ecb khai th\u00e1c, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 quy\u1ec1n truy c\u1eadp m\u1ea1ng c\u00f3 th\u1ec3 ti\u1ebfp c\u1eadn Avi Control Plane, t\u1ea1o r\u1ee7i ro tr\u1ef1c ti\u1ebfp cho l\u1edbp c\u00e2n b\u1eb1ng t\u1ea3i v\u00e0 v\u1eadn h\u00e0nh \u1ee9ng d\u1ee5ng.<\/p>\n

V\u00ec sao kh\u00f4ng n\u00ean ch\u1edd \u0111\u1ee3i<\/h2>\n

Kh\u00f4ng ph\u1ea3i m\u1ecdi l\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1 \u0111\u1ec1u b\u1ecb khai th\u00e1c ngay, nh\u01b0ng kho\u1ea3ng th\u1eddi gian t\u1eeb c\u00f4ng b\u1ed1 \u0111\u1ebfn v\u0169 kh\u00ed h\u00f3a ng\u00e0y c\u00e0ng ng\u1eafn. Khi m\u00e3 khai th\u00e1c \u0111\u00e3 xu\u1ea5t hi\u1ec7n c\u00f4ng khai, c\u00e1c nh\u00f3m t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 nhanh ch\u00f3ng t\u00edch h\u1ee3p v\u00e0o b\u1ed9 c\u00f4ng c\u1ee5 t\u1ef1 \u0111\u1ed9ng, qu\u00e9t di\u1ec7n r\u1ed9ng v\u00e0 nh\u1eafm v\u00e0o t\u1ed5 ch\u1ee9c ch\u1eadm c\u1eadp nh\u1eadt.<\/p>\n

V\u1edbi tr\u00ecnh duy\u1ec7t, r\u1ee7i ro c\u00f2n n\u1eb1m \u1edf th\u00f3i quen s\u1eed d\u1ee5ng h\u1eb1ng ng\u00e0y. Ng\u01b0\u1eddi d\u00f9ng ch\u1ec9 c\u1ea7n m\u1edf m\u1ed9t trang \u0111\u1ed9c h\u1ea1i, nh\u1ea5p v\u00e0o n\u1ed9i dung b\u1ecb d\u00e0n d\u1ef1ng ho\u1eb7c d\u00f9ng phi\u00ean b\u1ea3n c\u0169 trong m\u00f4i tr\u01b0\u1eddng doanh nghi\u1ec7p l\u00e0 c\u00f3 th\u1ec3 t\u1ea1o \u0111i\u1ec3m v\u00e0o ban \u0111\u1ea7u cho m\u00e3 \u0111\u1ed9c. V\u1edbi m\u00e1y ch\u1ee7 \u1ee9ng d\u1ee5ng v\u00e0 thi\u1ebft b\u1ecb c\u00e2n b\u1eb1ng t\u1ea3i, h\u1eadu qu\u1ea3 th\u01b0\u1eddng nghi\u00eam tr\u1ecdng h\u01a1n v\u00ec c\u00e1c h\u1ec7 th\u1ed1ng n\u00e0y n\u1eb1m g\u1ea7n d\u1eef li\u1ec7u v\u00e0 lu\u1ed3ng truy c\u1eadp quan tr\u1ecdng.<\/p>\n

C\u00e1ch \u01b0u ti\u00ean v\u00e1 l\u1ed7i trong doanh nghi\u1ec7p<\/h2>\n

Nh\u00f3m k\u1ef9 thu\u1eadt n\u00ean \u01b0u ti\u00ean tr\u01b0\u1edbc c\u00e1c b\u1ea3n v\u00e1 c\u00f3 m\u00e3 khai th\u00e1c c\u00f4ng khai, \u0111i\u1ec3m CVSS cao, s\u1ea3n ph\u1ea9m ti\u1ebfp x\u00fac Internet v\u00e0 h\u1ec7 th\u1ed1ng x\u1eed l\u00fd d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m. Trong \u0111\u1ee3t n\u00e0y, Firefox, Chrome, ColdFusion v\u00e0 VMware Avi Load Balancer \u0111\u1ec1u n\u00ean \u0111\u01b0\u1ee3c \u0111\u01b0a v\u00e0o danh s\u00e1ch ki\u1ec3m tra kh\u1ea9n, \u0111\u1eb7c bi\u1ec7t \u1edf c\u00e1c m\u00e1y tr\u1ea1m qu\u1ea3n tr\u1ecb v\u00e0 h\u1ea1 t\u1ea7ng public-facing.<\/p>\n

M\u1ed9t quy tr\u00ecnh th\u1ef1c t\u1ebf c\u00f3 th\u1ec3 b\u1eaft \u0111\u1ea7u b\u1eb1ng vi\u1ec7c ki\u1ec3m k\u00ea phi\u00ean b\u1ea3n, x\u00e1c \u0111\u1ecbnh t\u00e0i s\u1ea3n ch\u1ecbu \u1ea3nh h\u01b0\u1edfng, th\u1eed nghi\u1ec7m nhanh tr\u00ean nh\u00f3m m\u00e1y \u0111\u1ea1i di\u1ec7n, tri\u1ec3n khai theo v\u00f2ng, sau \u0111\u00f3 x\u00e1c minh b\u1eb1ng c\u00f4ng c\u1ee5 qu\u1ea3n l\u00fd endpoint ho\u1eb7c qu\u00e9t l\u1ed7 h\u1ed5ng. Song song, h\u1ec7 th\u1ed1ng gi\u00e1m s\u00e1t n\u00ean theo d\u00f5i crash b\u1ea5t th\u01b0\u1eddng c\u1ee7a tr\u00ecnh duy\u1ec7t, ti\u1ebfn tr\u00ecnh l\u1ea1 sau khi truy c\u1eadp web v\u00e0 truy c\u1eadp b\u1ea5t th\u01b0\u1eddng v\u00e0o control plane c\u1ee7a thi\u1ebft b\u1ecb h\u1ea1 t\u1ea7ng.<\/p>\n

B\u00e0i h\u1ecdc cho ng\u01b0\u1eddi d\u00f9ng c\u00e1 nh\u00e2n<\/h2>\n

Ng\u01b0\u1eddi d\u00f9ng c\u00e1 nh\u00e2n n\u00ean b\u1eadt c\u1eadp nh\u1eadt t\u1ef1 \u0111\u1ed9ng cho tr\u00ecnh duy\u1ec7t, kh\u1edfi \u0111\u1ed9ng l\u1ea1i tr\u00ecnh duy\u1ec7t sau khi b\u1ea3n v\u00e1 \u0111\u01b0\u1ee3c t\u1ea3i v\u1ec1 v\u00e0 tr\u00e1nh tr\u00ec ho\u00e3n th\u00f4ng b\u00e1o c\u1eadp nh\u1eadt h\u1ec7 th\u1ed1ng. V\u1edbi ph\u1ea7n m\u1ec1m Adobe ho\u1eb7c c\u00f4ng c\u1ee5 doanh nghi\u1ec7p c\u00e0i tr\u00ean m\u00e1y c\u00e1 nh\u00e2n, c\u1ea7n t\u1ea3i b\u1ea3n c\u1eadp nh\u1eadt t\u1eeb k\u00eanh ch\u00ednh th\u1ee9c thay v\u00ec li\u00ean k\u1ebft qu\u1ea3ng c\u00e1o ho\u1eb7c g\u00f3i c\u00e0i \u0111\u1eb7t kh\u00f4ng r\u00f5 ngu\u1ed3n.<\/p>\n

\u0110\u1ee3t v\u00e1 l\u1ed7i n\u00e0y c\u0169ng nh\u1eafc l\u1ea1i r\u1eb1ng an to\u00e0n s\u1ed1 kh\u00f4ng ch\u1ec9 n\u1eb1m \u1edf ph\u1ea7n m\u1ec1m ch\u1ed1ng virus. M\u1ed9t tr\u00ecnh duy\u1ec7t c\u0169, m\u1ed9t m\u00e1y ch\u1ee7 ch\u01b0a v\u00e1 ho\u1eb7c m\u1ed9t control plane b\u1ecb b\u1ecf qu\u00ean \u0111\u1ec1u c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh \u0111i\u1ec3m y\u1ebfu ban \u0111\u1ea7u. C\u1eadp nh\u1eadt \u0111\u00fang l\u00fac v\u1eabn l\u00e0 m\u1ed9t trong nh\u1eefng l\u1edbp ph\u00f2ng th\u1ee7 r\u1ebb nh\u1ea5t v\u00e0 hi\u1ec7u qu\u1ea3 nh\u1ea5t.<\/p>\n

VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb The Hacker News, Mozilla, Google, Adobe v\u00e0 Broadcom<\/em><\/p>","protected":false},"excerpt":{"rendered":"

C\u00e1c b\u1ea3n v\u00e1 m\u1edbi cho Firefox, Chrome, Adobe v\u00e0 VMware nh\u1eafc l\u1ea1i t\u1ea7m quan tr\u1ecdng c\u1ee7a qu\u1ea3n l\u00fd b\u1ea3n v\u00e1 khi m\u00e3 khai th\u00e1c c\u00f4ng khai v\u00e0 l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng xu\u1ea5t hi\u1ec7n.<\/p>","protected":false},"author":2,"featured_media":1766,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[386,388,389,390,391,392,393,76,385,34,394,395,387],"class_list":["post-1768","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kien-thuc","tag-adobe","tag-broadcom","tag-cve-2026-15718","tag-cve-2026-15719","tag-cve-2026-15764","tag-cve-2026-15765","tag-cve-2026-47865","tag-firefox","tag-google-chrome","tag-lo-hong-bao-mat","tag-patch-tuesday","tag-quan-ly-ban-va","tag-vmware"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1768","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1768"}],"version-history":[{"count":0,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1768\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1766"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1768"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1768"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1768"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}