Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-81955
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,84% | 8 Sep 2026 |
|
CVE-2026-81956
microsoft 365 apps, microsoft excel +6 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81957
microsoft 365 apps, microsoft excel +5 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81958
microsoft 365 apps, microsoft excel +5 lainnya
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,54% | 8 Sep 2026 |
|
CVE-2026-81959
microsoft 365 apps, microsoft excel +5 lainnya
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81960
microsoft 365 apps, microsoft excel +5 lainnya
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81947
microsoft 365 apps, microsoft excel +6 lainnya
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81948
microsoft 365 apps, microsoft excel +5 lainnya
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81949
microsoft 365 apps, microsoft excel +5 lainnya
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81950
microsoft 365 apps, microsoft excel +5 lainnya
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81951
microsoft 365 apps, microsoft excel +5 lainnya
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81952
microsoft 365 apps, microsoft 365 +4 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-81953
microsoft 365 apps, microsoft excel +5 lainnya
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81954
microsoft 365 apps, microsoft excel +5 lainnya
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81821
The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information.
|
8.4 High | — | 0,15% | 8 Sep 2026 |
|
CVE-2026-81822
The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through com...
|
8.4 High | — | 0,11% | 8 Sep 2026 |
|
CVE-2026-81823
The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosur...
|
5.3 Medium | — | 0,38% | 8 Sep 2026 |
|
CVE-2026-81824
The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on...
|
4.7 Medium | — | 0,37% | 8 Sep 2026 |
|
CVE-2026-81395
microsoft 365 apps, microsoft excel +5 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,54% | 8 Sep 2026 |
|
CVE-2026-81396
microsoft 365 apps, microsoft excel +5 lainnya
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81397
microsoft 365 apps, microsoft excel +5 lainnya
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81398
microsoft 365 apps, microsoft excel +5 lainnya
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81399
microsoft 365 apps, microsoft excel +5 lainnya
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,54% | 8 Sep 2026 |
|
CVE-2026-81400
microsoft 365 apps, microsoft excel +5 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,54% | 8 Sep 2026 |
|
CVE-2026-81401
microsoft 365 apps, microsoft excel +6 lainnya
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,54% | 8 Sep 2026 |
|
CVE-2026-81388
microsoft 365 apps, microsoft excel +5 lainnya
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81389
microsoft 365 apps, microsoft excel +5 lainnya
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.0 High | — | 0,37% | 8 Sep 2026 |
|
CVE-2026-81390
microsoft 365 apps, microsoft excel +6 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,54% | 8 Sep 2026 |
|
CVE-2026-81391
microsoft 365 apps, microsoft excel +5 lainnya
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,54% | 8 Sep 2026 |
|
CVE-2026-81392
microsoft 365 apps, microsoft excel +5 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,54% | 8 Sep 2026 |
|
CVE-2026-81393
microsoft 365 apps, microsoft excel +5 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,54% | 8 Sep 2026 |
|
CVE-2026-81394
microsoft 365 apps, microsoft excel +5 lainnya
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,55% | 8 Sep 2026 |
|
CVE-2026-81378
microsoft visual studio code
Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
|
8.2 High | — | 0,54% | 8 Sep 2026 |
|
CVE-2026-81379
microsoft visual studio code
Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
|
8.2 High | — | 0,54% | 8 Sep 2026 |
|
CVE-2026-81380
microsoft visual studio code
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose i...
|
5.9 Medium | — | 0,62% | 8 Sep 2026 |
|
CVE-2026-81381
microsoft visual studio code
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 0,87% | 8 Sep 2026 |
|
CVE-2026-81383
microsoft visual studio code
Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
|
7.4 High | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-81385
microsoft 365 apps, microsoft office 2019 +3 lainnya
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 1,3% | 8 Sep 2026 |
|
CVE-2026-81386
microsoft 365 apps, microsoft excel +5 lainnya
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81387
microsoft 365 apps, microsoft excel +5 lainnya
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,55% | 8 Sep 2026 |
|
CVE-2026-81353
microsoft heif image extension
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-81354
microsoft windows 10 1809, microsoft windows 10 21h2 +6 lainnya
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
|
8.2 High | — | 0,35% | 8 Sep 2026 |
|
CVE-2026-81355
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,20% | 8 Sep 2026 |
|
CVE-2026-81356
microsoft visual studio code
Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a...
|
8.2 High | — | 0,54% | 8 Sep 2026 |
|
CVE-2026-81357
microsoft visual studio code
Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
|
8.2 High | — | 0,51% | 8 Sep 2026 |
|
CVE-2026-81376
microsoft visual studio code
Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
|
9.6 Critical | — | 0,90% | 8 Sep 2026 |
|
CVE-2026-81377
microsoft visual studio code
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.
|
6.5 Medium | — | 0,76% | 8 Sep 2026 |
|
CVE-2026-81349
microsoft azure hdinsight
Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a...
|
7.2 High | — | 1,0% | 8 Sep 2026 |
|
CVE-2026-81352
microsoft web media extensions
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,48% | 8 Sep 2026 |
|
CVE-2026-80097
microsoft authenticator
Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.
|
8.6 High | — | 0,44% | 8 Sep 2026 |