Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-70293
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-70292
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-70291
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 1,0% | 13 Okt 2026 |
|
CVE-2026-70288
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-70287
microsoft 365 apps, microsoft 365 +2 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,80% | 13 Okt 2026 |
|
CVE-2026-70286
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 13 Okt 2026 |
|
CVE-2026-70285
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-70284
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-70282
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,80% | 13 Okt 2026 |
|
CVE-2026-70281
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 1,0% | 13 Okt 2026 |
|
CVE-2026-70280
Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.
|
4.4 Medium | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-70279
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over...
|
9.3 Critical | — | 0,86% | 13 Okt 2026 |
|
CVE-2026-70278
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-70277
Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,55% | 13 Okt 2026 |
|
CVE-2026-70276
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 13 Okt 2026 |
|
CVE-2026-70275
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,84% | 13 Okt 2026 |
|
CVE-2026-70274
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-70273
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,28% | 13 Okt 2026 |
|
CVE-2026-70272
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-70271
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,30% | 13 Okt 2026 |
|
CVE-2026-70270
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
|
5.5 Medium | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-70269
microsoft 365 apps, microsoft 365 +2 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 13 Okt 2026 |
|
CVE-2026-70268
microsoft 365 apps, microsoft 365 +2 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,80% | 13 Okt 2026 |
|
CVE-2026-70267
microsoft sharepoint server
Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
|
7.2 High | — | 0,92% | 13 Okt 2026 |
|
CVE-2026-70266
microsoft sharepoint server
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges ov...
|
8.8 High | — | 0,95% | 13 Okt 2026 |
|
CVE-2026-70264
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,43% | 13 Okt 2026 |
|
CVE-2026-70263
microsoft 365 apps, microsoft 365 +2 lainnya
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,91% | 13 Okt 2026 |
|
CVE-2026-70262
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,84% | 13 Okt 2026 |
|
CVE-2026-70261
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,49% | 13 Okt 2026 |
|
CVE-2026-70260
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,49% | 13 Okt 2026 |
|
CVE-2026-70259
microsoft sharepoint server
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,83% | 13 Okt 2026 |
|
CVE-2026-70258
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,84% | 13 Okt 2026 |
|
CVE-2026-70257
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,80% | 13 Okt 2026 |
|
CVE-2026-70256
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,80% | 13 Okt 2026 |
|
CVE-2026-70255
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,36% | 13 Okt 2026 |
|
CVE-2026-70254
microsoft 365 apps, microsoft 365 +2 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,80% | 13 Okt 2026 |
|
CVE-2026-70253
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,30% | 13 Okt 2026 |
|
CVE-2026-70252
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-70251
microsoft sharepoint server
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
|
7.5 High | — | 0,56% | 13 Okt 2026 |
|
CVE-2026-70250
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
|
8.8 High | — | 0,42% | 13 Okt 2026 |
|
CVE-2026-70249
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,30% | 13 Okt 2026 |
|
CVE-2026-70248
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
|
6.5 Medium | — | 0,39% | 13 Okt 2026 |
|
CVE-2026-70247
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,31% | 13 Okt 2026 |
|
CVE-2026-70246
microsoft sharepoint server
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,77% | 13 Okt 2026 |
|
CVE-2026-70245
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
|
7.8 High | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-70244
Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,94% | 13 Okt 2026 |
|
CVE-2026-70243
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-70242
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 1,0% | 13 Okt 2026 |
|
CVE-2026-70241
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-70238
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |