Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-96919
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | — | 13 Okt 2026 |
|
CVE-2026-96918
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-96917
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
|
8.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-96916
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-96915
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-96914
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
|
8.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-96913
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
8.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-96912
Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-96911
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-96910
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96909
Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | — | 13 Okt 2026 |
|
CVE-2026-96868
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | — | 13 Okt 2026 |
|
CVE-2026-96867
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-96866
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | — | 13 Okt 2026 |
|
CVE-2026-96865
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
|
5.6 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96864
Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | — | 13 Okt 2026 |
|
CVE-2026-96863
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.8 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96862
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-96861
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | — | 13 Okt 2026 |
|
CVE-2026-96860
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96859
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96858
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96857
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96856
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-96855
Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96854
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96853
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
4.7 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96852
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | — | 13 Okt 2026 |
|
CVE-2026-96851
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96850
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96849
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96848
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96847
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-96846
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96844
Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.
|
8.0 High | — | — | 13 Okt 2026 |
|
CVE-2026-96843
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-96325
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | — | 13 Okt 2026 |
|
CVE-2026-96324
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-96323
Use after free in Windows Update allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | — | 13 Okt 2026 |
|
CVE-2026-96322
Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | — | 13 Okt 2026 |
|
CVE-2026-96321
Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96320
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | — | 13 Okt 2026 |
|
CVE-2026-96319
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | — | 13 Okt 2026 |
|
CVE-2026-96318
Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-96317
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-96316
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96315
Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96314
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-96313
Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | — | 13 Okt 2026 |
|
CVE-2026-96312
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | — | 13 Okt 2026 |