Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-83787
Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
|
5.5 Medium | — | 0,29% | 13 Okt 2026 |
|
CVE-2026-83786
Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.
|
4.7 Medium | — | 0,36% | 13 Okt 2026 |
|
CVE-2026-83785
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,29% | 13 Okt 2026 |
|
CVE-2026-83784
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,95% | 13 Okt 2026 |
|
CVE-2026-83783
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83782
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,89% | 13 Okt 2026 |
|
CVE-2026-83781
Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83780
Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,96% | 13 Okt 2026 |
|
CVE-2026-83779
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83778
Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,80% | 13 Okt 2026 |
|
CVE-2026-83777
Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.
|
8.8 High | — | 0,55% | 13 Okt 2026 |
|
CVE-2026-83776
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.8 Medium | — | 0,45% | 13 Okt 2026 |
|
CVE-2026-83775
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges local...
|
7.0 High | — | 0,21% | 13 Okt 2026 |
|
CVE-2026-83774
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
|
4.7 Medium | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-83773
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,49% | 13 Okt 2026 |
|
CVE-2026-83771
Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.
|
8.8 High | — | 0,55% | 13 Okt 2026 |
|
CVE-2026-83770
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 1,00% | 13 Okt 2026 |
|
CVE-2026-83769
Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 13 Okt 2026 |
|
CVE-2026-83768
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,36% | 13 Okt 2026 |
|
CVE-2026-83767
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-83766
Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.
|
4.2 Medium | — | 0,36% | 13 Okt 2026 |
|
CVE-2026-83765
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83764
Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,28% | 13 Okt 2026 |
|
CVE-2026-83763
Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,36% | 13 Okt 2026 |
|
CVE-2026-83762
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83761
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-83760
Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,31% | 13 Okt 2026 |
|
CVE-2026-83759
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,72% | 13 Okt 2026 |
|
CVE-2026-83758
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83757
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83756
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,26% | 13 Okt 2026 |
|
CVE-2026-83755
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-83754
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
7.5 High | — | 0,60% | 13 Okt 2026 |
|
CVE-2026-83753
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83752
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,20% | 13 Okt 2026 |
|
CVE-2026-83751
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-83750
Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,21% | 13 Okt 2026 |
|
CVE-2026-83749
Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,20% | 13 Okt 2026 |
|
CVE-2026-83748
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,72% | 13 Okt 2026 |
|
CVE-2026-83747
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-83746
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
|
8.1 High | — | 1,0% | 13 Okt 2026 |
|
CVE-2026-83741
Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-83740
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-83739
Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.
|
7.5 High | — | 0,42% | 13 Okt 2026 |
|
CVE-2026-83738
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-83737
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-83736
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
5.5 Medium | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-83735
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-83733
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-83732
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |