csirt@kutim:~/threat-intel/cve
$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.042 (Critical 36.325 · High 105.117 · KEV 1.754 · sejak 2020)  ·  Pembaruan terakhir: 24 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 22.901–22.950 dari 263.042 CVE.

CVE Severity KEV EPSS Terbit
CVE-2026-80086
microsoft 365 apps, microsoft 365 +3 lainnya
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-80087
microsoft 365 apps, microsoft 365 +4 lainnya
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-80088
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-80089
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-80090
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-80091
microsoft 365 apps, microsoft 365 +4 lainnya
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-80093
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
7.0 High — 0,32% 8 Sep 2026
CVE-2026-80096
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
8.8 High — 0,91% 8 Sep 2026
CVE-2026-80079
microsoft 365 apps, microsoft office 2019 +3 lainnya
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-80080
microsoft 365 apps, microsoft 365 +4 lainnya
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-80081
microsoft 365 apps
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-80082
microsoft 365 apps, microsoft 365 +3 lainnya
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-80083
microsoft windows 11 23h2, microsoft windows 11 24h2 +4 lainnya
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
8.8 High — 0,33% 8 Sep 2026
CVE-2026-80084
microsoft 365 apps, microsoft office 2016 +3 lainnya
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-80085
microsoft 365 apps, microsoft 365 +4 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-79904
adobe photoshop mobile
Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature by...
5.0 Medium — 0,19% 8 Sep 2026
CVE-2026-80073
microsoft 365 apps, microsoft office 2019 +3 lainnya
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-80074
microsoft remote desktop client
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-80075
microsoft windows 10 21h2, microsoft windows 10 22h2 +3 lainnya
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.
7.8 High — 0,33% 8 Sep 2026
CVE-2026-80076
microsoft 365 apps, microsoft 365 +3 lainnya
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-80077
microsoft remote desktop client
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-80078
microsoft 365 apps, microsoft 365 +3 lainnya
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-78524
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-78525
microsoft 365 apps, microsoft 365 +4 lainnya
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-78526
microsoft 365 apps, microsoft 365 +4 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-78517
microsoft 365 apps, microsoft 365 +4 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-78518
microsoft 365 apps, microsoft excel +5 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — 0,86% 8 Sep 2026
CVE-2026-78519
microsoft 365 apps, microsoft office 2019 +3 lainnya
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-78520
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-78521
microsoft 365 apps, microsoft 365 +4 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-78522
microsoft 365 apps, microsoft office 2019 +3 lainnya
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-78523
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.
7.5 High — 0,98% 8 Sep 2026
CVE-2026-78509
microsoft 365 apps, microsoft 365 +4 lainnya
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
9.8 Critical — 0,97% 8 Sep 2026
CVE-2026-78510
microsoft 365 apps, microsoft 365 +4 lainnya
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
8.4 High — 0,34% 8 Sep 2026
CVE-2026-78511
microsoft 365 apps, microsoft 365 +4 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-78512
microsoft 365 apps, microsoft 365 +5 lainnya
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-78513
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
5.5 Medium — 0,54% 8 Sep 2026
CVE-2026-78514
microsoft 365 apps, microsoft 365 +4 lainnya
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-78515
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-78516
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
4.3 Medium — 0,52% 8 Sep 2026
CVE-2026-78502
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-78503
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
6.5 Medium — 0,92% 8 Sep 2026
CVE-2026-78504
microsoft 365 apps, microsoft 365 +4 lainnya
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-78505
microsoft 365 apps, microsoft 365 +4 lainnya
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-78506
microsoft 365 apps, microsoft 365 +4 lainnya
Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
5.5 Medium — 0,54% 8 Sep 2026
CVE-2026-78507
microsoft 365 apps, microsoft 365 +3 lainnya
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
8.8 High — 0,82% 8 Sep 2026
CVE-2026-78508
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.
4.6 Medium — 0,47% 8 Sep 2026
CVE-2026-78455
microsoft windows 10 1607, microsoft windows 10 1809 +8 lainnya
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.
4.3 Medium — 0,52% 8 Sep 2026
CVE-2026-78456
microsoft sql server 2022
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
8.8 High — 0,91% 8 Sep 2026
CVE-2026-78457
microsoft windows 11 24h2, microsoft windows 11 25h2 +3 lainnya
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
7.0 High — 0,26% 8 Sep 2026
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.