Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-85864
Improper privilege management in Python allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,75% | 13 Okt 2026 |
|
CVE-2026-85863
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-85861
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-85860
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-85859
Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 0,79% | 13 Okt 2026 |
|
CVE-2026-85858
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-85857
Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,47% | 13 Okt 2026 |
|
CVE-2026-85856
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.
|
7.1 High | — | 0,36% | 13 Okt 2026 |
|
CVE-2026-85855
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,29% | 13 Okt 2026 |
|
CVE-2026-85854
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-85853
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-85852
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-85851
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 13 Okt 2026 |
|
CVE-2026-85850
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-85849
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-85848
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 13 Okt 2026 |
|
CVE-2026-85847
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,67% | 13 Okt 2026 |
|
CVE-2026-85846
Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,20% | 13 Okt 2026 |
|
CVE-2026-85843
Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 13 Okt 2026 |
|
CVE-2026-85842
Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-85841
Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.
|
6.6 Medium | — | 0,65% | 13 Okt 2026 |
|
CVE-2026-85840
Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,95% | 13 Okt 2026 |
|
CVE-2026-85837
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-85836
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-85835
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-85834
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-85833
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-85832
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 13 Okt 2026 |
|
CVE-2026-85831
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-85830
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-85829
Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-85828
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-85827
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,20% | 13 Okt 2026 |
|
CVE-2026-85826
Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-85825
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,19% | 13 Okt 2026 |
|
CVE-2026-85824
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,19% | 13 Okt 2026 |
|
CVE-2026-85823
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-85822
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-85821
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
|
6.5 Medium | — | 0,95% | 13 Okt 2026 |
|
CVE-2026-85820
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-85818
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
|
9.0 Critical | — | 0,42% | 13 Okt 2026 |
|
CVE-2026-85817
Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,74% | 13 Okt 2026 |
|
CVE-2026-85816
Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.
|
5.7 Medium | — | 0,52% | 13 Okt 2026 |
|
CVE-2026-85815
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-85814
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,93% | 13 Okt 2026 |
|
CVE-2026-85812
Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,39% | 13 Okt 2026 |
|
CVE-2026-85811
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.
|
7.5 High | — | 0,36% | 13 Okt 2026 |
|
CVE-2026-85810
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-85809
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
9.8 Critical | — | 0,93% | 13 Okt 2026 |
|
CVE-2026-85808
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,1% | 13 Okt 2026 |