Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-78461
microsoft visual studio code
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a n...
|
7.4 High | — | 1,0% | 8 Sep 2026 |
|
CVE-2026-78462
microsoft visual studio code
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
|
8.8 High | — | 0,76% | 8 Sep 2026 |
|
CVE-2026-78463
microsoft remote desktop client
Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,86% | 8 Sep 2026 |
|
CVE-2026-78464
microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,20% | 8 Sep 2026 |
|
CVE-2026-78450
microsoft windows 10 1809, microsoft windows server 2019 +2 lainnya
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 8 Sep 2026 |
|
CVE-2026-78451
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.8 Medium | — | 0,44% | 8 Sep 2026 |
|
CVE-2026-78452
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.
|
4.6 Medium | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-78453
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-78454
microsoft windows 10 1607, microsoft windows 10 1809 +8 lainnya
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-78442
microsoft sql server 2017, microsoft sql server 2019
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-78444
microsoft windows 10 1809, microsoft windows server 2019 +2 lainnya
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 8 Sep 2026 |
|
CVE-2026-78445
microsoft windows server 2012, microsoft windows server 2016 +3 lainnya
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-78446
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
|
7.5 High | — | 0,48% | 8 Sep 2026 |
|
CVE-2026-78447
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-78448
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-78449
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 8 Sep 2026 |
|
CVE-2026-78439
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,84% | 8 Sep 2026 |
|
CVE-2026-78441
microsoft sql server 2017, microsoft sql server 2019
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-77908
microsoft dynamics 365
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,99% | 8 Sep 2026 |
|
CVE-2026-77909
microsoft azure cyclecloud
Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,58% | 8 Sep 2026 |
|
CVE-2026-77911
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-77899
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-77901
microsoft 365 apps, microsoft 365 +4 lainnya
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-77904
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-77905
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-77906
microsoft visual studio 2026
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-77907
microsoft visual studio 2026
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-77892
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.8 Medium | — | 0,44% | 8 Sep 2026 |
|
CVE-2026-77893
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-77894
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges local...
|
7.0 High | — | 0,20% | 8 Sep 2026 |
|
CVE-2026-77895
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-77896
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 0,70% | 8 Sep 2026 |
|
CVE-2026-77897
microsoft power automate for desktop
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,28% | 8 Sep 2026 |
|
CVE-2026-77898
microsoft 365 apps, microsoft 365 +3 lainnya
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
|
7.5 High | — | 0,61% | 8 Sep 2026 |
|
CVE-2026-77886
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-77887
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
|
6.4 Medium | — | 0,28% | 8 Sep 2026 |
|
CVE-2026-77888
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-77889
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-77890
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-77891
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
|
6.4 Medium | — | 0,28% | 8 Sep 2026 |
|
CVE-2026-77501
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-77502
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-77503
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 8 Sep 2026 |
|
CVE-2026-77504
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-77505
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 8 Sep 2026 |
|
CVE-2026-77498
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-77499
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-77500
microsoft windows 10 1607, microsoft windows 10 1809 +8 lainnya
Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-77492
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-77493
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |