Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-70237
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,29% | 13 Okt 2026 |
|
CVE-2026-70236
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,28% | 13 Okt 2026 |
|
CVE-2026-70235
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
|
5.5 Medium | — | 0,29% | 13 Okt 2026 |
|
CVE-2026-70234
Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-70233
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 13 Okt 2026 |
|
CVE-2026-70232
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,49% | 13 Okt 2026 |
|
CVE-2026-70230
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-70229
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 13 Okt 2026 |
|
CVE-2026-70228
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 13 Okt 2026 |
|
CVE-2026-70227
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-70225
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-70223
Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,28% | 13 Okt 2026 |
|
CVE-2026-70222
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-70220
microsoft 365 apps, microsoft 365 +2 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,43% | 13 Okt 2026 |
|
CVE-2026-70219
microsoft 365 apps, microsoft office 2021 +1 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,85% | 13 Okt 2026 |
|
CVE-2026-70218
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-70217
microsoft sharepoint server
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
|
4.9 Medium | — | 0,88% | 13 Okt 2026 |
|
CVE-2026-70216
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
|
5.5 Medium | — | 0,31% | 13 Okt 2026 |
|
CVE-2026-70215
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,80% | 13 Okt 2026 |
|
CVE-2026-70214
microsoft 365 apps, microsoft office 2021 +1 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,51% | 13 Okt 2026 |
|
CVE-2026-70213
Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.
|
8.0 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-70212
Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-70211
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-70210
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,84% | 13 Okt 2026 |
|
CVE-2026-70209
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-70208
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-70207
Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.
|
7.5 High | — | 0,66% | 13 Okt 2026 |
|
CVE-2026-70206
microsoft 365 apps, microsoft 365 +2 lainnya
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,85% | 13 Okt 2026 |
|
CVE-2026-70205
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-70202
microsoft sharepoint server
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
|
7.5 High | — | 0,52% | 13 Okt 2026 |
|
CVE-2026-70201
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.
|
5.5 Medium | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-70199
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,49% | 13 Okt 2026 |
|
CVE-2026-70198
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-70197
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,70% | 13 Okt 2026 |
|
CVE-2026-70196
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
|
5.9 Medium | — | 0,80% | 13 Okt 2026 |
|
CVE-2026-70195
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.
|
4.7 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-70194
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
|
6.5 Medium | — | 0,43% | 13 Okt 2026 |
|
CVE-2026-70190
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
|
7.3 High | — | 0,46% | 13 Okt 2026 |
|
CVE-2026-70188
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a netwo...
|
9.1 Critical | — | 0,83% | 13 Okt 2026 |
|
CVE-2026-70187
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,69% | 13 Okt 2026 |
|
CVE-2026-70186
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 0,85% | 13 Okt 2026 |
|
CVE-2026-70185
Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
|
8.8 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-70184
Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-70183
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a net...
|
7.5 High | — | 0,46% | 13 Okt 2026 |
|
CVE-2026-70181
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,1% | 13 Okt 2026 |
|
CVE-2026-70179
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
|
7.5 High | — | 0,56% | 13 Okt 2026 |
|
CVE-2026-70177
Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-70176
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,30% | 13 Okt 2026 |
|
CVE-2026-70175
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
|
8.1 High | — | 0,64% | 13 Okt 2026 |
|
CVE-2026-70174
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,80% | 13 Okt 2026 |