Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-73466
On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during operations when specialized non-sta...
|
6.3 Medium | — | 0,13% | 15 Sep 2026 |
|
CVE-2026-73465
On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in clear text to log files during operations when specialized...
|
6.3 Medium | — | 0,13% | 15 Sep 2026 |
|
CVE-2026-73451
On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting...
|
4.8 Medium | — | 0,23% | 15 Sep 2026 |
|
CVE-2026-69216
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s chunk decoder trims the chunk-size token and accepts leading plus or minus signs in...
|
5.4 Medium | — | 0,37% | 15 Sep 2026 |
|
CVE-2026-69214
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware stores a response cookie’s Domain attribute without checkin...
|
6.8 Medium | — | 0,40% | 15 Sep 2026 |
|
CVE-2026-69213
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember HTTP/2 serializes outbound frames through one unbounded queue consumed by writeLoop....
|
7.5 High | — | 0,63% | 15 Sep 2026 |
|
CVE-2026-69212
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The FollowRedirect client middleware strips Authorization and Cookie headers only when a re...
|
5.9 Medium | — | 0,28% | 15 Sep 2026 |
|
CVE-2026-69211
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResponseCookie.render writes attacker-influenced name, content, domain, path, and extension...
|
4.8 Medium | — | 0,33% | 15 Sep 2026 |
|
CVE-2026-69209
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The shared WebSocket decoder permits unbounded message buffering because defragmentation ac...
|
7.5 High | — | 0,63% | 15 Sep 2026 |
|
CVE-2026-69208
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, the DigestAuth server middleware removes fresh nonces and stops eviction at the first stale...
|
7.5 High | — | 0,77% | 15 Sep 2026 |
|
CVE-2026-69204
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember HTTP/1.1 does not reject messages containing both Transfer-Encoding and Content-Lengt...
|
9.2 Critical | — | 0,57% | 15 Sep 2026 |
|
CVE-2026-69201
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResourceService and WebjarService decode each URL path segment but reject only segments exa...
|
5.9 Medium | — | 0,76% | 15 Sep 2026 |
|
CVE-2026-68534
Concrete CMS before 9.5.3 rendered Express entry labels as raw HTML when displaying associated entries, resulting in stored cross-site scripting. An unauthenticated attac...
|
2.3 Low | — | 0,57% | 15 Sep 2026 |
|
CVE-2026-68533
Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluating the "Add Message Attachments" permission, which...
|
2.3 Low | — | 0,39% | 15 Sep 2026 |
|
CVE-2026-68532
Concrete CMS 9.0.0 to dashboard group type controller did not validate a CSRF token on its delete action, resulting in cross-site request forgery. A remote unauthenticate...
|
2.3 Low | — | 0,30% | 15 Sep 2026 |
|
CVE-2026-68531
Concrete CMS 9 before 9.5.3 did not escape SQL LIKE wildcard characters in the keyword search filters used by the file manager, file folders, and page list, allowing an a...
|
2.1 Low | — | 0,46% | 15 Sep 2026 |
|
CVE-2026-68530
Concrete CMS 9 through 9.5.2 did not perform an authorization check on several board-instance actions in the Boards area of the Dashboard. The instance details single-pag...
|
2.1 Low | — | 0,47% | 15 Sep 2026 |
|
CVE-2026-68529
Concrete CMS 9.0.0 through 9.5.2 was missing an authorization check on the Express entries advanced-search dashboard action. The advanced_search() method in DashboardSele...
|
2.1 Low | — | 0,44% | 15 Sep 2026 |
|
CVE-2026-58773
google android
In link_load_gnss_image of link_device.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with Sys...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58767
google android
In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege wit...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58766
google android
In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege wit...
|
7.8 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58765
google android
In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed....
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58755
google android
In smmu_install_nested_ste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privileg...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58751
google android
In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58747
google android
In smmu_detach_dev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58744
google android
In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional e...
|
7.8 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58739
google android
In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege wit...
|
6.7 Medium | — | 0,09% | 15 Sep 2026 |
|
CVE-2026-58734
google android
In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no add...
|
7.0 High | — | 0,07% | 15 Sep 2026 |
|
CVE-2026-58731
google android
In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This could lead to local information disclosure with no...
|
6.2 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58728
google android
In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privi...
|
7.0 High | — | 0,07% | 15 Sep 2026 |
|
CVE-2026-58726
google android
In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58724
google android
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges neede...
|
7.0 High | — | 0,07% | 15 Sep 2026 |
|
CVE-2026-58721
google android
In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution p...
|
4.4 Medium | — | 0,09% | 15 Sep 2026 |
|
CVE-2026-58718
google android
In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58716
google android
In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution pr...
|
6.7 Medium | — | 0,08% | 15 Sep 2026 |
|
CVE-2026-58710
google android
In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no add...
|
8.8 High | — | 0,37% | 15 Sep 2026 |
|
CVE-2026-58704
Advisory
google android
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no a...
|
8.8 High | KEV | 0,59% | 15 Sep 2026 |
|
CVE-2026-58701
google android
In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System e...
|
7.0 High | — | 0,07% | 15 Sep 2026 |
|
CVE-2026-58699
google android
In Vp9DecEndOfStream of vp9hwd_output.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with n...
|
8.4 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58698
google android
In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58695
google android
In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of pr...
|
7.8 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58691
google android
In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional exe...
|
8.4 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58683
google android
In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional executio...
|
8.8 High | — | 0,37% | 15 Sep 2026 |
|
CVE-2026-58679
google android
In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with...
|
8.4 High | — | 0,11% | 15 Sep 2026 |
|
CVE-2026-58678
google android
In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges n...
|
7.8 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-57042
google android
In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with Sys...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-57035
google android
In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-57014
google android
In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation...
|
7.8 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-57012
google android
In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional ex...
|
8.4 High | — | 0,14% | 15 Sep 2026 |
|
CVE-2026-57008
google android
In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privi...
|
7.5 High | — | 0,33% | 15 Sep 2026 |