Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-83669
Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-83668
Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83667
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 1,1% | 13 Okt 2026 |
|
CVE-2026-83666
Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker...
|
7.0 High | — | 0,20% | 13 Okt 2026 |
|
CVE-2026-83665
Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 13 Okt 2026 |
|
CVE-2026-83664
Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83659
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,28% | 13 Okt 2026 |
|
CVE-2026-83658
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,28% | 13 Okt 2026 |
|
CVE-2026-83657
Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
|
5.5 Medium | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-83656
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
|
4.7 Medium | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-83655
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 13 Okt 2026 |
|
CVE-2026-83654
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,28% | 13 Okt 2026 |
|
CVE-2026-83652
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83651
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,94% | 13 Okt 2026 |
|
CVE-2026-83650
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83649
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 1,1% | 13 Okt 2026 |
|
CVE-2026-83648
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 1,1% | 13 Okt 2026 |
|
CVE-2026-83647
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,1% | 13 Okt 2026 |
|
CVE-2026-83646
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.
|
4.8 Medium | — | 0,37% | 13 Okt 2026 |
|
CVE-2026-83645
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,1% | 13 Okt 2026 |
|
CVE-2026-83644
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-83643
Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,84% | 13 Okt 2026 |
|
CVE-2026-83642
Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,84% | 13 Okt 2026 |
|
CVE-2026-83641
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83640
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83639
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83638
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83637
Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-83636
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
|
6.5 Medium | — | 0,39% | 13 Okt 2026 |
|
CVE-2026-83635
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 13 Okt 2026 |
|
CVE-2026-83634
Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83588
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83587
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83586
Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,28% | 13 Okt 2026 |
|
CVE-2026-83585
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83584
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-83583
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 13 Okt 2026 |
|
CVE-2026-83582
Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
|
4.7 Medium | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-83580
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,29% | 13 Okt 2026 |
|
CVE-2026-83579
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-83578
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,96% | 13 Okt 2026 |
|
CVE-2026-83575
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-83574
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-83573
Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.8 Medium | — | 0,45% | 13 Okt 2026 |
|
CVE-2026-83571
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-83570
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-83569
Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 13 Okt 2026 |
|
CVE-2026-83568
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 13 Okt 2026 |
|
CVE-2026-83567
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-83566
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |