Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-83920
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,26% | 13 Okt 2026 |
|
CVE-2026-83919
Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-83918
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,26% | 13 Okt 2026 |
|
CVE-2026-83917
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-83916
Double free in Windows Error Reporting allows an authorized attacker to execute code locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-83915
Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-83914
Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,72% | 13 Okt 2026 |
|
CVE-2026-83913
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-83912
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,26% | 13 Okt 2026 |
|
CVE-2026-83911
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-83910
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,96% | 13 Okt 2026 |
|
CVE-2026-83909
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
|
4.7 Medium | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-83908
Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-83907
Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,49% | 13 Okt 2026 |
|
CVE-2026-83906
Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
|
6.5 Medium | — | 0,89% | 13 Okt 2026 |
|
CVE-2026-83905
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.
|
4.7 Medium | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-83904
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-83903
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-83902
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,36% | 13 Okt 2026 |
|
CVE-2026-83901
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-83900
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-83899
Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,21% | 13 Okt 2026 |
|
CVE-2026-83898
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-83897
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
|
4.7 Medium | — | 0,36% | 13 Okt 2026 |
|
CVE-2026-83896
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,36% | 13 Okt 2026 |
|
CVE-2026-83895
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.8 Medium | — | 0,45% | 13 Okt 2026 |
|
CVE-2026-83893
Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally...
|
5.5 Medium | — | 0,49% | 13 Okt 2026 |
|
CVE-2026-83892
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-83891
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,77% | 13 Okt 2026 |
|
CVE-2026-83889
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 13 Okt 2026 |
|
CVE-2026-83888
Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
|
6.5 Medium | — | 0,89% | 13 Okt 2026 |
|
CVE-2026-83887
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-83886
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,30% | 13 Okt 2026 |
|
CVE-2026-83885
Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.
|
5.6 Medium | — | 0,19% | 13 Okt 2026 |
|
CVE-2026-83884
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-83883
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-83882
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-83881
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-83879
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges...
|
7.0 High | — | 0,21% | 13 Okt 2026 |
|
CVE-2026-83877
Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-83876
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-83875
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,29% | 13 Okt 2026 |
|
CVE-2026-83874
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,77% | 13 Okt 2026 |
|
CVE-2026-83873
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,35% | 13 Okt 2026 |
|
CVE-2026-83872
Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83871
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,20% | 13 Okt 2026 |
|
CVE-2026-83870
Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-83869
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,65% | 13 Okt 2026 |
|
CVE-2026-83868
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privile...
|
7.0 High | — | 0,16% | 13 Okt 2026 |
|
CVE-2026-83867
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 13 Okt 2026 |