Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-85342
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-85341
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-85340
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 13 Okt 2026 |
|
CVE-2026-85339
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
8.8 High | — | 0,56% | 13 Okt 2026 |
|
CVE-2026-85338
Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 13 Okt 2026 |
|
CVE-2026-85337
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,89% | 13 Okt 2026 |
|
CVE-2026-85336
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-85334
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 1,0% | 13 Okt 2026 |
|
CVE-2026-85333
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privil...
|
6.7 Medium | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-85332
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-85331
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,95% | 13 Okt 2026 |
|
CVE-2026-85329
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges local...
|
7.0 High | — | 0,20% | 13 Okt 2026 |
|
CVE-2026-85328
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-85327
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-85324
Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 0,77% | 13 Okt 2026 |
|
CVE-2026-85323
Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.
|
6.8 Medium | — | 0,49% | 13 Okt 2026 |
|
CVE-2026-85322
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 1,0% | 13 Okt 2026 |
|
CVE-2026-85321
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,1% | 13 Okt 2026 |
|
CVE-2026-85320
Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,31% | 13 Okt 2026 |
|
CVE-2026-85319
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,1% | 13 Okt 2026 |
|
CVE-2026-85318
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-84994
Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization cause...
|
8.7 High | — | 0,52% | 13 Okt 2026 |
|
CVE-2026-84020
Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-84019
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,20% | 13 Okt 2026 |
|
CVE-2026-84018
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,19% | 13 Okt 2026 |
|
CVE-2026-84017
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,1% | 13 Okt 2026 |
|
CVE-2026-84016
Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-84015
Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,89% | 13 Okt 2026 |
|
CVE-2026-84014
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-84013
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-84012
Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,67% | 13 Okt 2026 |
|
CVE-2026-84011
Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.
|
5.5 Medium | — | 0,29% | 13 Okt 2026 |
|
CVE-2026-84009
Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.
|
4.7 Medium | — | 0,20% | 13 Okt 2026 |
|
CVE-2026-84008
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 0,77% | 13 Okt 2026 |
|
CVE-2026-84007
Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,99% | 13 Okt 2026 |
|
CVE-2026-83935
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,70% | 13 Okt 2026 |
|
CVE-2026-83934
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,80% | 13 Okt 2026 |
|
CVE-2026-83933
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,43% | 13 Okt 2026 |
|
CVE-2026-83932
Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-83931
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-83930
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-83929
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,61% | 13 Okt 2026 |
|
CVE-2026-83928
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,58% | 13 Okt 2026 |
|
CVE-2026-83927
Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-83926
Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.
|
4.4 Medium | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-83925
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
|
4.7 Medium | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-83924
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-83923
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,92% | 13 Okt 2026 |
|
CVE-2026-83922
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-83921
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,28% | 13 Okt 2026 |