csirt@kutim:~/threat-intel/cve
$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.042 (Critical 36.325 · High 105.117 · KEV 1.754 · sejak 2020)  ·  Pembaruan terakhir: 24 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 22.801–22.850 dari 263.042 CVE.

CVE Severity KEV EPSS Terbit
CVE-2026-86074
n8n
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI credential setup flow accepted a credential test or verification URL witho...
7.1 High — 0,38% 8 Sep 2026
CVE-2026-85875
microsoft 365 apps, microsoft excel +5 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
5.5 Medium — 0,54% 8 Sep 2026
CVE-2026-85877
microsoft windows 11 24h2
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-85360
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
7.0 High — 0,26% 8 Sep 2026
CVE-2026-84001
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.
7.5 High — 1,2% 8 Sep 2026
CVE-2026-84003
microsoft azure/msal-node
Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.
7.4 High — 0,60% 8 Sep 2026
CVE-2026-83995
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83996
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
8.8 High — 0,33% 8 Sep 2026
CVE-2026-83997
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
8.1 High — 0,71% 8 Sep 2026
CVE-2026-83998
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-83999
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate priv...
7.0 High — 0,28% 8 Sep 2026
CVE-2026-84000
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83986
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83987
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83988
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83989
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.
7.5 High — 1,2% 8 Sep 2026
CVE-2026-83990
microsoft windows 11 23h2, microsoft windows 11 24h2 +4 lainnya
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83991
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.
5.5 Medium — 0,30% 8 Sep 2026
CVE-2026-83992
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-83979
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83980
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83981
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83982
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83983
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83985
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83974
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83975
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83976
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83977
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83978
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83968
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83969
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83970
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83971
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83972
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83973
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83955
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83967
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83948
microsoft vm repair
Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.
8.0 High — 0,59% 8 Sep 2026
CVE-2026-83949
microsoft 365 apps, microsoft office 2019 +3 lainnya
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
5.5 Medium — 0,54% 8 Sep 2026
CVE-2026-83951
microsoft 365 apps, microsoft office 2019 +3 lainnya
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
5.5 Medium — 0,54% 8 Sep 2026
CVE-2026-83952
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83954
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83498
microsoft windows 11 23h2, microsoft windows 11 24h2 +3 lainnya
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-83501
microsoft windows 11 23h2, microsoft windows 11 24h2 +3 lainnya
Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
5.5 Medium — 0,40% 8 Sep 2026
CVE-2026-83939
microsoft windows 11 26h1
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
8.2 High — 0,35% 8 Sep 2026
CVE-2026-83940
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
7.0 High — 0,26% 8 Sep 2026
CVE-2026-83941
microsoft entra id
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
8.8 High — 0,78% 8 Sep 2026
CVE-2026-83942
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
7.8 High — 0,30% 8 Sep 2026
CVE-2026-81963 Advisory
microsoft windows 11 23h2, microsoft windows 11 24h2 +3 lainnya
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
7.8 High KEV 0,39% 8 Sep 2026
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.