Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-100792
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi...
|
7.1 High | — | 0,28% | 29 Sep 2026 |
|
CVE-2026-100791
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157,...
|
8.8 High | — | 0,34% | 29 Sep 2026 |
|
CVE-2026-100790
Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR...
|
8.8 High | — | 0,34% | 29 Sep 2026 |
|
CVE-2026-100789
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157...
|
8.8 High | — | 0,34% | 29 Sep 2026 |
|
CVE-2026-100788
Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firef...
|
9.8 Critical | — | 0,44% | 29 Sep 2026 |
|
CVE-2026-100787
Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
9.6 Critical | — | 0,30% | 29 Sep 2026 |
|
CVE-2026-100786
Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4,...
|
9.6 Critical | — | 0,32% | 29 Sep 2026 |
|
CVE-2026-100785
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157,...
|
8.8 High | — | 0,32% | 29 Sep 2026 |
|
CVE-2026-100784
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox...
|
8.8 High | — | 0,32% | 29 Sep 2026 |
|
CVE-2026-100783
Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157,...
|
4.3 Medium | — | 0,28% | 29 Sep 2026 |
|
CVE-2026-100782
Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.1...
|
8.8 High | — | 0,26% | 29 Sep 2026 |
|
CVE-2026-100781
mozilla firefox, mozilla thunderbird
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird...
|
9.6 Critical | — | 0,33% | 29 Sep 2026 |
|
CVE-2026-100780
mozilla firefox, mozilla thunderbird
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157,...
|
8.8 High | — | 0,32% | 29 Sep 2026 |
|
CVE-2026-100779
mozilla firefox, mozilla thunderbird
Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR...
|
8.8 High | — | 0,32% | 29 Sep 2026 |
|
CVE-2026-100778
mozilla firefox, mozilla thunderbird
Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbir...
|
9.6 Critical | — | 0,32% | 29 Sep 2026 |
|
CVE-2026-100777
mozilla firefox, mozilla thunderbird
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157...
|
8.8 High | — | 0,32% | 29 Sep 2026 |
|
CVE-2026-100776
mozilla firefox, mozilla thunderbird
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefo...
|
8.8 High | — | 0,31% | 29 Sep 2026 |
|
CVE-2026-100775
mozilla firefox, mozilla thunderbird
Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox...
|
9.6 Critical | — | 0,33% | 29 Sep 2026 |
|
CVE-2026-100774
mozilla firefox, mozilla thunderbird
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157,...
|
8.8 High | — | 0,32% | 29 Sep 2026 |
|
CVE-2026-100773
mozilla firefox, mozilla thunderbird
Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157...
|
8.8 High | — | 0,32% | 29 Sep 2026 |
|
CVE-2026-100772
mozilla firefox, mozilla thunderbird
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157,...
|
8.8 High | — | 0,31% | 29 Sep 2026 |
|
CVE-2026-100771
mozilla firefox, mozilla thunderbird
Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157,...
|
8.1 High | — | 0,31% | 29 Sep 2026 |
|
CVE-2026-100770
mozilla firefox, mozilla thunderbird
Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thun...
|
9.6 Critical | — | 0,32% | 29 Sep 2026 |
|
CVE-2026-100769
mozilla firefox, mozilla thunderbird
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefo...
|
8.8 High | — | 0,31% | 29 Sep 2026 |
|
CVE-2026-100768
mozilla firefox, mozilla thunderbird
Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
|
8.8 High | — | 0,28% | 29 Sep 2026 |
|
CVE-2026-100767
mozilla firefox, mozilla thunderbird
Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157,...
|
8.8 High | — | 0,32% | 29 Sep 2026 |
|
CVE-2026-100766
mozilla firefox, mozilla thunderbird
Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefo...
|
4.3 Medium | — | 0,25% | 29 Sep 2026 |
|
CVE-2026-100765
mozilla firefox, mozilla thunderbird
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
8.8 High | — | 0,29% | 29 Sep 2026 |
|
CVE-2026-100764
mozilla firefox, mozilla thunderbird
Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
|
8.8 High | — | 0,23% | 29 Sep 2026 |
|
CVE-2026-100763
mozilla firefox, mozilla thunderbird
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
|
9.1 Critical | — | 0,38% | 29 Sep 2026 |
|
CVE-2026-100762
mozilla firefox, mozilla thunderbird
Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thun...
|
9.6 Critical | — | 0,32% | 29 Sep 2026 |
|
CVE-2026-100761
mozilla firefox, mozilla thunderbird
Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
|
8.8 High | — | 0,22% | 29 Sep 2026 |
|
CVE-2026-100760
mozilla firefox, mozilla thunderbird
Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
9.6 Critical | — | 0,30% | 29 Sep 2026 |
|
CVE-2026-100759
mozilla firefox, mozilla thunderbird
Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, F...
|
8.1 High | — | 0,31% | 29 Sep 2026 |
|
CVE-2026-100758
mozilla firefox, mozilla thunderbird
Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, F...
|
9.6 Critical | — | 0,30% | 29 Sep 2026 |
|
CVE-2026-100757
mozilla firefox, mozilla thunderbird
Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ES...
|
8.8 High | — | 0,32% | 29 Sep 2026 |
|
CVE-2026-100756
mozilla firefox, mozilla thunderbird
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird...
|
8.1 High | — | 0,31% | 29 Sep 2026 |
|
CVE-2026-95520
A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAG_LONGFILESIZES value is 0xFFFFFFFFFFFFFFFF ca...
|
7.1 High | — | 0,12% | 29 Sep 2026 |
|
CVE-2026-87748
Missing Authorization vulnerability in Interprobe Information Technologies Inc. Qorela DC allows Privilege Abuse.
This issue affects Qorela DC: from 1.6.1-RC29 before v1...
|
8.8 High | — | 0,23% | 29 Sep 2026 |
|
CVE-2026-85520
Google Merchant Center Feed (gmfeed) module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. An unauthenticated attacker can...
|
9.3 Critical | — | 0,99% | 29 Sep 2026 |
|
CVE-2026-73597
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker wi...
|
8.1 High | — | 0,10% | 29 Sep 2026 |
|
CVE-2026-73596
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high pr...
|
6.5 Medium | — | 0,20% | 29 Sep 2026 |
|
CVE-2026-73595
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability....
|
9.8 Critical | — | 0,11% | 29 Sep 2026 |
|
CVE-2026-73594
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unau...
|
8.8 High | — | 0,08% | 29 Sep 2026 |
|
CVE-2026-73593
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access...
|
6.7 Medium | — | 0,09% | 29 Sep 2026 |
|
CVE-2026-66083
apache dolphinscheduler
The /datasources/unauth-datasource endpoint does not properly enforce data source authorization. An authenticated user can invoke this endpoint to obtain information abou...
|
6.5 Medium | — | 0,31% | 29 Sep 2026 |
|
CVE-2026-41875
Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft special website, which when visited by the admin, will automati...
|
6.9 Medium | — | 0,17% | 29 Sep 2026 |
|
CVE-2026-102507
Sliver C2 framework version 1.7.7 and earlier contains an unhandled panic vulnerability in the operator gRPC handler that allows an attacker controlling a compromised imp...
|
5.7 Medium | — | 0,18% | 29 Sep 2026 |
|
CVE-2026-102497
apache xmlschema
The Apache XmlSchema walker (xmlschema-walker) doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with su...
|
7.5 High | — | 0,53% | 29 Sep 2026 |
|
CVE-2026-102496
apache xmlschema
Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack...
|
7.5 High | — | 0,53% | 29 Sep 2026 |