Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-69963
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,31% | 13 Okt 2026 |
|
CVE-2026-69959
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-69958
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
|
6.8 Medium | — | 0,45% | 13 Okt 2026 |
|
CVE-2026-69957
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-69955
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,89% | 13 Okt 2026 |
|
CVE-2026-69954
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-69953
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-69952
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-69950
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-69949
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-69947
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
|
6.8 Medium | — | 0,45% | 13 Okt 2026 |
|
CVE-2026-69945
Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.
|
8.8 High | — | 0,28% | 13 Okt 2026 |
|
CVE-2026-69943
microsoft sharepoint server
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
|
8.8 High | — | 0,81% | 13 Okt 2026 |
|
CVE-2026-69942
Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-69940
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,94% | 13 Okt 2026 |
|
CVE-2026-69935
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,21% | 13 Okt 2026 |
|
CVE-2026-69934
Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-69931
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally...
|
7.0 High | — | 0,21% | 13 Okt 2026 |
|
CVE-2026-69926
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 13 Okt 2026 |
|
CVE-2026-69923
Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-69922
microsoft 365 apps, microsoft office 2021 +1 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,85% | 13 Okt 2026 |
|
CVE-2026-69919
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-69918
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
|
8.8 High | — | 0,36% | 13 Okt 2026 |
|
CVE-2026-69916
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-69915
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-69914
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-69913
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,55% | 13 Okt 2026 |
|
CVE-2026-69909
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,31% | 13 Okt 2026 |
|
CVE-2026-69905
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.
|
5.5 Medium | — | 0,31% | 13 Okt 2026 |
|
CVE-2026-69902
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
|
6.7 Medium | — | 0,36% | 13 Okt 2026 |
|
CVE-2026-69898
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-69886
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,79% | 13 Okt 2026 |
|
CVE-2026-69884
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-69883
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,79% | 13 Okt 2026 |
|
CVE-2026-69882
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-69880
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 13 Okt 2026 |
|
CVE-2026-69877
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-69867
Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-69856
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,21% | 13 Okt 2026 |
|
CVE-2026-69850
Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-69840
Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-69830
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a...
|
8.1 High | — | 0,35% | 13 Okt 2026 |
|
CVE-2026-69802
Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,52% | 13 Okt 2026 |
|
CVE-2026-69798
Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-69795
Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-69789
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
|
7.5 High | — | 0,42% | 13 Okt 2026 |
|
CVE-2026-69783
External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,44% | 13 Okt 2026 |
|
CVE-2026-69766
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,21% | 13 Okt 2026 |
|
CVE-2026-69765
Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,66% | 13 Okt 2026 |
|
CVE-2026-69763
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,21% | 13 Okt 2026 |