Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-68534
Concrete CMS before 9.5.3 rendered Express entry labels as raw HTML when displaying associated entries, resulting in stored cross-site scripting. An unauthenticated attac...
|
2.3 Low | — | 0,57% | 15 Sep 2026 |
|
CVE-2026-68533
Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluating the "Add Message Attachments" permission, which...
|
2.3 Low | — | 0,39% | 15 Sep 2026 |
|
CVE-2026-68532
Concrete CMS 9.0.0 to dashboard group type controller did not validate a CSRF token on its delete action, resulting in cross-site request forgery. A remote unauthenticate...
|
2.3 Low | — | 0,30% | 15 Sep 2026 |
|
CVE-2026-68531
Concrete CMS 9 before 9.5.3 did not escape SQL LIKE wildcard characters in the keyword search filters used by the file manager, file folders, and page list, allowing an a...
|
2.1 Low | — | 0,46% | 15 Sep 2026 |
|
CVE-2026-68530
Concrete CMS 9 through 9.5.2 did not perform an authorization check on several board-instance actions in the Boards area of the Dashboard. The instance details single-pag...
|
2.1 Low | — | 0,47% | 15 Sep 2026 |
|
CVE-2026-68529
Concrete CMS 9.0.0 through 9.5.2 was missing an authorization check on the Express entries advanced-search dashboard action. The advanced_search() method in DashboardSele...
|
2.1 Low | — | 0,44% | 15 Sep 2026 |
|
CVE-2026-58773
google android
In link_load_gnss_image of link_device.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with Sys...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58767
google android
In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege wit...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58766
google android
In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege wit...
|
7.8 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58765
google android
In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed....
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58755
google android
In smmu_install_nested_ste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privileg...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58751
google android
In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58747
google android
In smmu_detach_dev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58744
google android
In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional e...
|
7.8 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58739
google android
In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege wit...
|
6.7 Medium | — | 0,09% | 15 Sep 2026 |
|
CVE-2026-58734
google android
In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no add...
|
7.0 High | — | 0,07% | 15 Sep 2026 |
|
CVE-2026-58731
google android
In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This could lead to local information disclosure with no...
|
6.2 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58728
google android
In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privi...
|
7.0 High | — | 0,07% | 15 Sep 2026 |
|
CVE-2026-58726
google android
In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58724
google android
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges neede...
|
7.0 High | — | 0,07% | 15 Sep 2026 |
|
CVE-2026-58721
google android
In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution p...
|
4.4 Medium | — | 0,09% | 15 Sep 2026 |
|
CVE-2026-58718
google android
In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58716
google android
In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution pr...
|
6.7 Medium | — | 0,08% | 15 Sep 2026 |
|
CVE-2026-58710
google android
In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no add...
|
8.8 High | — | 0,37% | 15 Sep 2026 |
|
CVE-2026-58704
Advisory
google android
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no a...
|
8.8 High | KEV | 0,59% | 15 Sep 2026 |
|
CVE-2026-58701
google android
In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System e...
|
7.0 High | — | 0,07% | 15 Sep 2026 |
|
CVE-2026-58699
google android
In Vp9DecEndOfStream of vp9hwd_output.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with n...
|
8.4 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58698
google android
In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58695
google android
In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of pr...
|
7.8 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58691
google android
In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional exe...
|
8.4 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-58683
google android
In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional executio...
|
8.8 High | — | 0,37% | 15 Sep 2026 |
|
CVE-2026-58679
google android
In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with...
|
8.4 High | — | 0,11% | 15 Sep 2026 |
|
CVE-2026-58678
google android
In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges n...
|
7.8 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-57042
google android
In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with Sys...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-57035
google android
In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-57014
google android
In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation...
|
7.8 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-57012
google android
In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional ex...
|
8.4 High | — | 0,14% | 15 Sep 2026 |
|
CVE-2026-57008
google android
In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privi...
|
7.5 High | — | 0,33% | 15 Sep 2026 |
|
CVE-2026-57006
google android
In acfw_ffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed....
|
4.4 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-56997
google android
In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with n...
|
8.8 High | — | 0,37% | 15 Sep 2026 |
|
CVE-2026-56992
google android
In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges neede...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-56989
google android
In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-56988
google android
In multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execut...
|
6.4 Medium | — | 0,07% | 15 Sep 2026 |
|
CVE-2026-56986
google android
In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges...
|
8.4 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-56985
google android
In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional execution privi...
|
8.4 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-56982
google android
In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed....
|
7.8 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-56979
google android
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution priv...
|
6.7 Medium | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-56978
google android
In get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege with no add...
|
8.4 High | — | 0,10% | 15 Sep 2026 |
|
CVE-2026-56975
google android
In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote (proximal/adjacent) denial of service with no additio...
|
6.5 Medium | — | 0,15% | 15 Sep 2026 |
|
CVE-2026-56974
google android
In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no add...
|
8.8 High | — | 0,37% | 15 Sep 2026 |