Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-88174
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code...
|
8.1 High | — | 0,42% | 13 Okt 2026 |
|
CVE-2026-88173
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,52% | 13 Okt 2026 |
|
CVE-2026-88172
microsoft 365 apps, microsoft office 2021 +1 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,85% | 13 Okt 2026 |
|
CVE-2026-88171
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,69% | 13 Okt 2026 |
|
CVE-2026-88169
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,85% | 13 Okt 2026 |
|
CVE-2026-88168
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-88167
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,85% | 13 Okt 2026 |
|
CVE-2026-88166
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 13 Okt 2026 |
|
CVE-2026-88165
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,85% | 13 Okt 2026 |
|
CVE-2026-88163
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 13 Okt 2026 |
|
CVE-2026-88162
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.
|
5.5 Medium | — | 0,29% | 13 Okt 2026 |
|
CVE-2026-88161
Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-88160
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate...
|
7.0 High | — | 0,16% | 13 Okt 2026 |
|
CVE-2026-88159
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 1,0% | 13 Okt 2026 |
|
CVE-2026-88158
Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,29% | 13 Okt 2026 |
|
CVE-2026-88157
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,53% | 13 Okt 2026 |
|
CVE-2026-88156
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 1,00% | 13 Okt 2026 |
|
CVE-2026-88155
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 13 Okt 2026 |
|
CVE-2026-88154
microsoft 365 apps, microsoft 365 +2 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,85% | 13 Okt 2026 |
|
CVE-2026-88153
microsoft 365 apps, microsoft office 2021 +1 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,85% | 13 Okt 2026 |
|
CVE-2026-88152
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,36% | 13 Okt 2026 |
|
CVE-2026-88151
microsoft 365 apps, microsoft office 2021 +1 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,85% | 13 Okt 2026 |
|
CVE-2026-88150
Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,74% | 13 Okt 2026 |
|
CVE-2026-88149
Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,20% | 13 Okt 2026 |
|
CVE-2026-88147
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-88146
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized...
|
7.0 High | — | 0,19% | 13 Okt 2026 |
|
CVE-2026-88145
microsoft 365 apps, microsoft 365 +2 lainnya
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,74% | 13 Okt 2026 |
|
CVE-2026-88144
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,80% | 13 Okt 2026 |
|
CVE-2026-88143
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
|
6.7 Medium | — | 0,26% | 13 Okt 2026 |
|
CVE-2026-88142
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,85% | 13 Okt 2026 |
|
CVE-2026-88141
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-88140
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-88139
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,20% | 13 Okt 2026 |
|
CVE-2026-88137
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,95% | 13 Okt 2026 |
|
CVE-2026-88136
Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,95% | 13 Okt 2026 |
|
CVE-2026-88135
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,28% | 13 Okt 2026 |
|
CVE-2026-88134
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-88133
Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-88132
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.
|
5.9 Medium | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-88130
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 1,1% | 13 Okt 2026 |
|
CVE-2026-88129
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 1,1% | 13 Okt 2026 |
|
CVE-2026-88128
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-88127
Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-88126
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-88125
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 1,1% | 13 Okt 2026 |
|
CVE-2026-88124
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-88123
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 1,1% | 13 Okt 2026 |
|
CVE-2026-88122
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 0,79% | 13 Okt 2026 |
|
CVE-2026-88121
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
|
8.0 High | — | 0,49% | 13 Okt 2026 |
|
CVE-2026-88120
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,69% | 13 Okt 2026 |