Katalog CVE (hal. 448)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.902 (Critical 36.304 · High 105.051 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 23 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 22.351–22.400 dari 262.902 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-81989 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...	7.8 High	—	0,38%	8 Sep 2026
CVE-2026-81990 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...	7.8 High	—	0,38%	8 Sep 2026
CVE-2026-81991 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disc...	5.5 Medium	—	0,26%	8 Sep 2026
CVE-2026-81992 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of...	7.8 High	—	0,34%	8 Sep 2026
CVE-2026-81976 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...	7.8 High	—	0,38%	8 Sep 2026
CVE-2026-81977 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this v...	5.5 Medium	—	0,26%	8 Sep 2026
CVE-2026-81978 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disc...	5.5 Medium	—	0,26%	8 Sep 2026
CVE-2026-81979 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...	7.8 High	—	0,26%	8 Sep 2026
CVE-2026-81980 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...	7.8 High	—	0,26%	8 Sep 2026
CVE-2026-81981 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...	7.8 High	—	0,26%	8 Sep 2026
CVE-2026-81982 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disc...	5.5 Medium	—	0,26%	8 Sep 2026
CVE-2026-81983 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...	7.8 High	—	0,26%	8 Sep 2026
CVE-2026-81984 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose...	5.5 Medium	—	0,33%	8 Sep 2026
CVE-2026-81973 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...	7.8 High	—	0,38%	8 Sep 2026
CVE-2026-81975 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...	7.8 High	—	0,38%	8 Sep 2026
CVE-2026-81192 `OpenTelemetry.Resources.Host` NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Pr...	7.0 High	—	0,18%	8 Sep 2026
CVE-2026-80160 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disc...	5.5 Medium	—	0,26%	8 Sep 2026
CVE-2026-80161 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context...	7.8 High	—	0,29%	8 Sep 2026
CVE-2026-80162 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose...	5.5 Medium	—	0,33%	8 Sep 2026
CVE-2026-80159 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulne...	4.0 Medium	—	0,19%	8 Sep 2026
CVE-2026-79588 U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP.	4.3 Medium	—	0,15%	8 Sep 2026
CVE-2026-79907 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue req...	7.8 High	—	0,29%	8 Sep 2026
CVE-2026-79908 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...	7.8 High	—	0,26%	8 Sep 2026
CVE-2026-79909 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...	7.8 High	—	0,38%	8 Sep 2026
CVE-2026-79910 adobe acrobat, adobe acrobat dc +1 lainnya Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disc...	5.5 Medium	—	0,26%	8 Sep 2026
CVE-2026-78742 Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Multimedia library application introduction.	6.1 Medium	—	0,25%	8 Sep 2026
CVE-2026-78971 In Halo <= 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any command with Halo process permiss...	4.6 Medium	—	0,24%	8 Sep 2026
CVE-2026-78622 The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. Th...	6.0 Medium	—	0,13%	8 Sep 2026
CVE-2026-78629 okta hyperdrive The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA for a given user. The response...	5.5 Medium	—	0,14%	8 Sep 2026
CVE-2026-78630 okta access gateway The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authentica...	6.7 Medium	—	0,22%	8 Sep 2026
CVE-2026-78631 okta hyperdrive The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This inser...	5.5 Medium	—	0,14%	8 Sep 2026
CVE-2026-78635 The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scaleft:// prot...	5.0 Medium	—	0,20%	8 Sep 2026
CVE-2026-78738 Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Document management file upload feature.	6.1 Medium	—	0,25%	8 Sep 2026
CVE-2026-78741 Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) in the wysiwyg-CKEditor image upload feature.	6.1 Medium	—	0,25%	8 Sep 2026
CVE-2026-77827 Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'. F...	7.1 High	—	0,16%	8 Sep 2026
CVE-2026-19651 IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due...	7.4 High	—	0,26%	8 Sep 2026
CVE-2026-30754 ffmpeg A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in libavformat/rtpenc_h264_hevc.c, a negative size param...	8.8 High	—	0,52%	8 Sep 2026
CVE-2026-19625 When a Quarkus application has multiple endpoints secured by individual OIDC provider tenants, such as "/oidc-provider1" that is secured by the OIDC Provider 1 and "/oidc...	5.3 Medium	—	0,23%	8 Sep 2026
CVE-2026-86808 A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function vault_unlock_handler/vault_recovery_handler of the...	7.3 High	—	0,84%	8 Sep 2026
CVE-2026-86810 A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of...	7.3 High	—	0,84%	8 Sep 2026
CVE-2026-86806 A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function _is_within_roots. This manipulation causes server-side request forgery. The atta...	7.3 High	—	0,61%	8 Sep 2026
CVE-2026-86464 In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager (IdM) deployment included insecure defaul...	9.9 Critical	—	0,55%	8 Sep 2026
CVE-2026-84869 Advisory connectwise screenconnect A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in cert...	9.9 Critical	KEV	0,92%	8 Sep 2026
CVE-2026-84942 Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to...	8.7 High	—	0,54%	8 Sep 2026
CVE-2026-84197 In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @ecl...	9.2 Critical	—	0,34%	8 Sep 2026
CVE-2026-85484 HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping. The Select, RadioGroup, CheckboxGroup...	6.1 Medium	—	0,33%	8 Sep 2026
CVE-2026-85485 HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3 wrappers splic...	6.1 Medium	—	0,26%	8 Sep 2026
CVE-2026-85630 HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the process_attrs method. Any application with fields or fie...	6.1 Medium	—	0,25%	8 Sep 2026
CVE-2026-82007 adobe photoshop Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploit...	7.8 High	—	0,31%	8 Sep 2026
CVE-2026-82005 adobe photoshop Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...	7.8 High	—	0,26%	8 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.